D-Link xStack DGS-3610 Series - Page 613

DGS-3610 Series Configuration Guide Chapter 44 Access Control List Configuration
44-13
Command
Function
DGS-3610(config)# access-list id {deny |
permit} [prot | {[ethernet-type] [cos cos]}] [VID
vid] {src src-wildcard | host src }
{host src-mac-addr | any} {dst dst-wildcard |
host dst | any}{host dst-mac-addr | any}]
[precedence precedence] [tos tos] [ dscp
dscp] [time-range tm-rng-name]
Define an access list. For details about
commands, please see command reference.
DGS-3610(config)# interface interface
Select the interface to which the access list is
applied.
DGS-3610(config-if)# expert access-group id {in |
out }
Apply the access list to the specific interface
Method 2: Run the following command in the ACL configuration mode:
Command
Function
DGS-3610(config)# expert access-list
extended {id|name}
Enter the access list configuration mode
DGS-3610(config-exp-nacl)# [sn]{ permit |
deny }[prot | {[ethernet-type] [cos cos]}] [VID
vid] {src src-wildcard | host src | interface
idx}{host src-mac-addr | any} {dst
dst-wildcard | host dst | any}{host
dst-mac-addr | any}][precedence
precedence] [tos tos] [ dscp dscp]
[[time-range tm-rng-name]
Add table entries for ACL. For details about
commands, please see command reference.
DGS-3610(config-exp-nacl)# exit
DGS-3610(config)# interface interface
Exit from the access control list mode and
select the interface to which the access list is
applied.
DGS-3610(config-if)# expert access-group
{id|name} {in|out}
Apply the access list to the specific interface
Note
Method 1 only configures the numerical value ACL. Method 2 can
configure names and the numerical value ACL. In a version supporting
priority table entries, method 2 can also specify the priorities of table
entries (the [sn] option in a command).