196 MES1000, MES2000 Ethernet Switches
IPv6 and IPv4 lists can be used simultaneously in one physical interface. A MAC-based ACL
can not be used at the same time with IPv6 and IPv4 lists. Two lists of the same time can
not be used for the same interface.
The global configuration mode has commands which can be used to create and modify ACLs.
Global Configuration Mode Commands
Command line in the global configuration mode appears as follows:
console (config)#
Table 5.238—ACL creation and modification commands
ip access-list extended
access-list
Creates a new advanced IPv4 ACL and enters its configuration
mode (if the list has not been created yet) or the configuration
mode of a previously created list.
no ip access-list extended
access-list
ipv6 access-list access-list
Creates a new advanced IPv6 ACL and enters its configuration
mode (if the list has not been created yet) or the configuration
mode of a previously created list.
no ipv6 access-list
access-list
mac access-list extended
access-list
Creates a new MAC ACL and enters its configuration mode (if
the list has not been created yet) or the configuration mode of
a previously created list.
no mac access-list
extended access-list
Enters the time-range configuration mode and defines time
periods for the access list.
- range_name—profile name for time-range settings.
Removes the set time-range configuration.
To be activated, an ACL should be bound to an interface. The interface using the list may represent
either an Ethernet interface or a group of ports.
Commands for Interface Configuration of Ethernet Interface and a Group of Ports
Command line in the interface configuration mode for Ethernet interface and a group of ports
appears as follows:
console (config-if)#
Table 5.239—A command that assigns an ACL to an interface
service-acl input access_list
[profile profile_id]
access_list: 1..32
characters
profile_id: 0..2
The command specifies the list in the settings of a definite
physical interface and binds the list to the interface.
The 'profile' parameter is available in acl-only
mode only
no service-acl input
[profile profile_id]
Removes the list from the interface.