Edge-Core AS5700-54X - Page 357

1116 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

Chapter 9

| Access Control Lists

ACL Information

– 357 –

MAC access-list jerry:

permit any host 00-30-29-94-34-de ethertype 800 800

IP extended access-list A6:

deny tcp any any control-flag 2 2

permit any any

Console#

Table of Contents

Default Chapter2
- Default Chapter2
  - Cli Reference Guide2
- How to Use this Guide3
- Contents5
  - Table of Contents5
- Figures43
- Tables45
Section I53
- Getting Started53
1 Initial Switch Configuration55
- Connecting to the Switch55
- Configuring the Switch for Remote Management61
  - Using the Service Port or Network Interface61
  - Setting an IP Address62
- Enabling SNMP Management Access67
- Managing System Files69
  - Upgrading the Operation Code70
  - Saving or Restoring Configuration Settings71
- Configuring Automatic Installation of Operation Code and Configuration Settings72
- Setting the System Clock77
- Command Line Interface81
2 Using the Command Line Interface83
- Accessing the CLI83
  - Console Connection83
  - Telnet Connection83
- Entering Commands85
- CLI Command Groups93
3 General Commands95
- Prompt95
- Reload (Global Configuration)96
- Enable97
- Quit98
- Show History98
- Configure99
- Disable100
- Reload (Privileged Exec)100
- Show Reload101
- End101
- Exit101
4 System Management Commands103
- Device Designation103
  - Hostname104
- Banner Information104
- System Status113
- Fan Control125
- Line142
- Event Logging153
- SMTP Alerts159
5 SNMP Commands181
- General SNMP Commands182
6 Remote Monitoring Commands203
- Rmon Alarm204
- Rmon Event205
- Rmon Collection History206
- Rmon Collection Rmon1207
- Show Rmon Alarms208
- Show Rmon History209
7 Authentication Commands211
- User Accounts212
  - Username213
- Authentication Sequence214
  - Authentication Login215
- RADIUS Client216
- TACACS+ Client221
- Telnet Server228
  - Ip Telnet Port229
- Secure Shell230
- X Port Authentication240
- Management IP Filter252
  - Show Management253
8 General Security Measures255
- Port Security256
  - Port Security257
  - Show Port Security259
- Network Access (MAC Address Authentication)261
  - Network-Access Aging262
  - Network-Access Mac-Filter263
  - Network-Access Dynamic-Qos264
  - Network-Access Dynamic-Vlan265
  - Network-Access Guest-Vlan266
  - Network-Access Link-Detection267
  - Network-Access Link-Detection Link-Up268
  - Network-Access Max-Mac-Count269
  - Network-Access Port-Mac-Filter270
  - Mac-Authentication Intrusion-Action271
  - Clear Network-Access272
  - Show Network-Access Mac-Address-Table273
  - Show Network-Access Mac-Filter274
- Web-Auth Login-Attempts275
- Web-Auth Quiet-Period276
- Web-Auth System-Auth-Control277
- Web-Auth Re-Authenticate (Port)278
- Show Web-Auth279
- Show Web-Auth Summary280
- Ip Dhcp Snooping281
- Ip Dhcp Snooping Information Option283
- Ip Dhcp Snooping Information Option Encode No-Subtype284
- Ip Dhcp Snooping Information Option Remote-ID285
- Ip Dhcp Snooping Information Policy286
- Ip Dhcp Snooping Verify Mac-Address287
- Ip Dhcp Snooping Vlan288
- Ip Dhcp Snooping Trust290
- Clear Ip Dhcp Snooping Binding291
- Show Ip Dhcp Snooping292
- Dhcpv6 Snooping293
  - Ipv6 Dhcp Snooping Option Remote-ID296
  - Ipv6 Dhcp Snooping Option Remote-ID Policy297
  - Ipv6 Dhcp Snooping Vlan298
  - Ipv6 Dhcp Snooping Max-Binding299
  - Clear Ipv6 Dhcp Snooping Binding300
  - Clear Ipv6 Dhcp Snooping Statistics301
  - Show Ipv6 Dhcp Snooping Statistics302
  - Ip Source-Guard Binding303
  - Ip Source-Guard305
  - Ip Source-Guard Max-Binding306
  - Ip Source-Guard Mode307
  - Clear Ip Source-Guard Binding Blocked308
  - Show Ip Source-Guard Binding309
- Ipv6 Source Guard310
  - Ipv6 Source-Guard312
  - Ipv6 Source-Guard Max-Binding313
  - Show Ipv6 Source-Guard314
  - Show Ipv6 Source-Guard Binding315
  - Ipv6 Source-Guard Binding316
  - Ipv6 Source-Guard317
  - Ipv6 Source-Guard Max-Binding319
  - Show Ipv6 Source-Guard320
- ARP Inspection321
  - Ip Arp Inspection322
  - Ip Arp Inspection Filter323
  - Ip Arp Inspection Log-Buffer Logs324
  - Ip Arp Inspection Validate325
  - Ip Arp Inspection Limit326
  - Ip Arp Inspection Trust327
  - Show Ip Arp Inspection Configuration328
  - Show Ip Arp Inspection Log329
  - Port-Based Traffic Segmentation330
9 Access Control Lists335
- Access-List Ip336
- Permit, Deny (Extended Ipv4 ACL)338
- Ip Access-Group340
- Show Ip Access-Group341
- Ipv6 Acls342
- MAC Acls347
- ARP Acls352
10 Interface Commands359
- Interface Configuration360
11 Link Aggregation Commands389
- Manual Configuration Commands391
  - Channel-Group392
  - Dynamic Configuration Commands393
12 Port Mirroring Commands409
- Show Port Monitor410
- RSPAN Mirroring Commands411
13 Congestion Control Commands419
- Rate-Limit420
- Storm Control Commands421
14 Loopback Detection Commands423
- Loopback-Detection424
- Loopback-Detection Recover-Time425
- Loopback-Detection Transmit-Interval426
- Loopback-Detection Release427
- Show Loopback-Detection428
15 Unidirectional Link Detection Commands429
- Udld Message-Interval430
- Udld Recovery431
- Udld Aggressive432
- Udld Port433
- Show Udld434
16 Address Table Commands437
- Mac-Address-Table Static438
- Clear Mac-Address-Table Dynamic439
- Show Mac-Address-Table Aging-Time440
- Show Mac-Address-Table Count441
17 Spanning Tree Commands443
- Spanning-Tree444
- Spanning-Tree Forward-Time445
- Spanning-Tree Max-Age446
- Spanning-Tree Mode447
- Spanning-Tree Pathcost Method448
- Spanning-Tree Priority449
- Spanning-Tree System-Bpdu-Flooding450
- Max-Hops451
- Mst Vlan452
- Name453
- Revision454
- Spanning-Tree Bpdu-Guard455
- Spanning-Tree Cost456
- Spanning-Tree Edge-Port457
- Spanning-Tree Link-Type458
- Spanning-Tree Mst Cost459
- Spanning-Tree Mst Port-Priority460
- Spanning-Tree Port-Priority461
- Spanning-Tree Spanning-Disabled462
- Spanning-Tree Tc-Prop-Stop463
- Show Spanning-Tree464
- Show Spanning-Tree Mst Configuration466
18 VLAN Commands467
- GVRP and Bridge Extension Commands468
- Editing VLAN Groups472
  - Vlan473
- Configuring VLAN Interfaces474
- Displaying VLAN Information482
- Configuring IEEE 802.1Q Tunneling483
- Configuring L2CP Tunneling492
19 Class of Service Commands507
- Queue Mode508
- Queue Weight509
- Switchport Priority Default510
- Show Queue Mode511
- Qos Map Phb-Queue513
- Qos Map Default-Drop-Precedence515
- Qos Map Dscp-Cos516
- Qos Map Dscp-Mutation517
- Qos Map Ip-Port-Dscp518
- Qos Map Ip-Prec-Dscp519
- Qos Map Trust-Mode520
- Show Qos Map Cos-Dscp521
- Show Map Dscp-Cos522
- Show Qos Map Dscp-Mutation523
- Show Qos Map Ip-Prec-Dscp524
- Show Qos Map Phb-Queue525
20 Quality of Service Commands527
- Class-Map528
- Description529
- Rename531
- Class532
- Police Flow533
- Police Srtcm-Color534
- Police Trtcm-Color537
21 Data Center Bridging Commands545
- DCB Exchange Commands546
  - Dcbx Mode547
  - Show Dcbx548
- Priority-Based Flow Control Commands549
- Enhanced Transmission Selection Commands554
- Openflow Commands570
22 Multicast Filtering Commands581
- IGMP Snooping582
- Show Ip Igmp Snooping600
  - Show Ip Igmp Snooping Group601
    - Show Ip Igmp Snooping Mrouter602
  - Static Multicast Routing605
- IGMP Filtering and Throttling606
- MLD Snooping617
23 LLDP Commands653
- Lldp655
- Lldp Med-Fast-Start-Count656
- Lldp Notification-Interval657
- Lldp Reinit-Delay658
- Lldp Admin-Status659
- Lldp Basic-Tlv Port-Description660
- Lldp Basic-Tlv System-Capabilities661
- Lldp Basic-Tlv System-Name662
- Lldp Dcbx-Tlv Ets-Recommend663
- Lldp Dcbx-Tlv Pfc-Config664
- Lldp Dot1-Tlv Proto-VID665
- Lldp Dot1-Tlv Vlan-Name666
- Lldp Dot3-Tlv Mac-Phy667
- Lldp Med-Location CIVIC-Addr668
- Lldp Med-Notification669
- Lldp Med-Tlv Inventory670
- Lldp Med-Tlv Location671
- Lldp Med-Tlv Network-Policy672
- Show Lldp Config673
- Show Lldp Info Local-Device674
- Show Lldp Info Remote-Device675
- Show Lldp Info Statistics678
24 CFM Commands681
- Defining CFM Structures684
- Ethernet Cfm Ais Ma685
- Ethernet Cfm Ais Period686
- Ethernet Cfm Domain687
- Ethernet Cfm Enable689
- Ma Index Name690
- Ethernet Cfm Mep692
- Ethernet Cfm Port-Enable693
- Show Ethernet Cfm Configuration694
- Show Ethernet Cfm MD696
- Show Ethernet Cfm Maintenance-Points Local697
- Show Ethernet Cfm Maintenance-Points Local Detail Mep698
- Show Ethernet Cfm Maintenance-Points Remote Detail699
- Continuity Check Operations701
- Cross Check Operations707
25 Domain Name Service Commands723
- Ip Domain-List724
- Ip Domain-Lookup725
- Ip Name-Server727
- Ipv6 Host728
- Clear Host729
- Show Dns Cache730
26 DHCP Commands733
- Ip Dhcp Restart Client735
- Ipv6 Dhcp Client Rapid-Commit Vlan736
- DHCP Relay737
  - Ip Dhcp Restart Relay738
  - DHCP for Ipv6739
    - Show Ipv6 Dhcp Relay Destination740
27 IP Interface Commands741
- Basic Ipv4 Configuration742
- ND Snooping781
28 VRRP Commands791
- Vrrp Authentication792
- Vrrp Preempt794
- Vrrp Priority795
- Vrrp Timers Advertise796
- Show Vrrp Interface798
- Show Vrrp Interface Counters799
- Show Vrrp Router Counters800
29 IP Routing Commands801
- Ipv4 Commands803
- Show Ip Host-Route804
  - Show Ip Route805
  - Show Ip Route Database806
  - Show Ip Route Summary807
  - ECMP Commands808
- Routing Information Protocol (RIP)820
  - Default-Information Originate821
  - Default-Metric822
- Distance823
- Neighbor824
- Network825
- Passive-Interface826
- Timers Basic828
- Version829
- Ip Rip Authentication Mode830
- Ip Rip Authentication String831
- Ip Rip Receive-Packet832
- Ip Rip Send Version833
- Ip Rip Send-Packet834
- Ip Rip Split-Horizon835
- Show Ip Protocols Rip836
- Open Shortest Path First (Ospfv2)838
  - General Configuration839
  - Compatible Rfc1583840
  - Default-Information Originate841
  - Router-ID842
  - Timers Spf843
  - Clear Ip Ospf Process844
  - Area Range845
  - Auto-Cost Reference-Bandwidth846
  - Default-Metric847
  - Summary-Address849
  - Area Configuration850
  - Area Nssa851
    - Area Stub853
    - Area Virtual-Link854
  - Network Area856
  - Interface Configuration857
  - Ip Ospf Authentication-Key859
  - Ip Ospf Cost860
  - Ip Ospf Dead-Interval861
  - Ip Ospf Message-Digest-Key862
  - Ip Ospf Priority863
  - Ip Ospf Retransmit-Interval864
  - Ip Ospf Transmit-Delay865
    - Passive-Interface866
  - Show Ip Ospf Border-Routers868
  - Show Ip Ospf Database869
  - Show Ip Ospf Interface875
  - Show Ip Ospf Neighbor877
  - Show Ip Ospf Route878
  - Show Ip Protocols Ospf879
- Open Shortest Path First (Ospfv3)880
  - General Configuration882
  - Abr-Type883
  - Max-Current-DD884
  - Router-ID885
  - Timers Spf886
  - Area Range887
  - Default-Metric888
  - Redistribute889
    - Area Configuration890
    - Area Virtual-Link891
    - Ipv6 Router Ospf Area893
    - Ipv6 Router Ospf Tag Area894
    - Interface Configuration895
    - Ipv6 Ospf Dead-Interval896
    - Ipv6 Ospf Hello-Interval897
    - Ipv6 Ospf Retransmit-Interval898
    - Ipv6 Ospf Transmit-Delay899
    - Passive-Interface900
    - Show Ipv6 Ospf Database902
    - Show Ipv6 Ospf Interface903
    - Show Ipv6 Ospf Neighbor904
    - Show Ipv6 Ospf Route905
    - Show Ipv6 Ospf Virtual-Links906
  - Border Gateway Protocol (Bgpv4)908
    - BGP Routing Basics909
    - BGP Command List918
    - General Configuration922
    - Ip As-Path Access-List923
    - Ip Community-List924
    - Ip Extcommunity-List926
    - Ip Prefix-List928
    - Aggregate-Address929
    - Bgp Client-To-Client Reflection931
  - Bgp Cluster-ID932
  - Bgp Confederation Identifier933
  - Bgp Confederation Peer934
  - Bgp Dampening935
  - Bgp Enforce-First-As936
  - Bgp Log-Neighbor-Changes937
  - Bgp Router-ID938
    - Network939
  - Redistribute940
  - Timers Bgp941
  - Clear Ip Bgp942
  - Clear Ip Bgp Dampening943
- Route Metrics and Selection944
  - Bgp Bestpath Compare-Confed-Aspath945
  - Bgp Bestpath Med946
  - Bgp Default Local-Preference947
  - Distance948
  - Distance Bgp949
- Neighbor Configuration950
  - Neighbor Advertisement-Interval951
  - Neighbor Attribute-Unchanged952
  - Neighbor Capability Dynamic953
  - Neighbor Default-Originate954
  - Neighbor Description955
  - Neighbor Dont-Capability-Negotiate956
  - Neighbor Filter-List958
  - Neighbor Interface959
  - Neighbor Next-Hop-Self960
  - Neighbor Override-Capability961
  - Neighbor Passive962
  - Neighbor Peer-Group (Creating)963
  - Neighbor Peer-Group (Group Members)964
  - Neighbor Prefix-List965
  - Neighbor Remote-As966
  - Neighbor Route-Map967
  - Neighbor Route-Reflector-Client968
  - Neighbor Send-Community970
  - Neighbor Strict-Capability-Match972
  - Neighbor Unsuppress-Map974
  - Neighbor Weight975
- Display Information976
  - Show Ip Bgp Attribute-Info977
  - Show Ip Bgp Cidr-Only978
  - Show Ip Bgp Community-Info979
  - Show Ip Bgp Community-List980
  - Show Ip Bgp Filter-List982
  - Show Ip Bgp Paths984
  - Show Ip Bgp Prefix-List985
  - Show Ip Bgp Route-Map986
  - Show Ip Community-List987
  - Show Ip Extcommunity-List988
  - Show Ip Prefix-List Detail989
  - Show Ip Protocols Bgp990
- Policy-Based Routing for BGP991
  - Route-Map993
  - Call994
  - Continue995
  - Match As-Path996
  - Match Extcommunity997
  - Match Ip Next-Hop998
  - Match Ip Route-Source999
  - Match Origin1000
  - Match Peer1001
  - On-Match1002
  - Set As-Path1003
  - Set Comm-List Delete1004
30 Multicast Routing Commands1013
- Show Ip Mroute1014
- Ipv6 Commands1016
- Ip Pim Trigger-Hello-Delay1030
- Show Ip Pim Neighbor1031
- PIM-DM Commands1032
  - Ip Pim State-Refresh Origination-Interval1033
- PIM-SM Commands1034
- PIM6 Shared Mode Commands1048
A Legacy and Hybrid Operating Mode Feature Set Differences1073
- Problems Accessing the Management Interface1077
- Using System Logs1078
C License Information1079
- Glossary1083
- List of CLI Commands1091
- Index1095

Related product manuals

Preview: Edge-Core AS5610-52X

Edge-Core AS5610-52X

Preview: Edge-Core AS5916-54XKS

Edge-Core AS5916-54XKS

Preview: Edge-Core AS6700-32X

Edge-Core AS6700-32X

Preview: Edge-Core AS4610-54T

Edge-Core AS4610-54T

Edge-Core AS6701-32X

Preview: Edge-Core AS4610-30T

Edge-Core AS4610-30T

Preview: Edge-Core AS7326-56X

Edge-Core AS7326-56X

Preview: Edge-Core ES4626F

Edge-Core ES4626F

Preview: Edge-Core ES3510MA

Edge-Core ES3510MA

Preview: Edge-Core ECS1100-5P

Edge-Core ECS1100-5P

Preview: Edge-Core ECS5610-52S

Edge-Core ECS5610-52S

Preview: Edge-Core ECS4120-28F

Edge-Core ECS4120-28F