MES53xx, MES33xx, MES23xx Ethernet Switch Series 175
show access-lists
[access_list]
Display active ACLs created on a switch.
show interfaces access-lists
[gigabitethernet gi_port |
tengigabitethernet te_port |
fortygigabitethernet fo_port |
port-channel group |
vlan vlan_id]
gi_port: (1..8/0/1..48);
te_port: (1..8/0/1..24);
fo_port: (1..8/0/1..4);
group: (1..16);
vlan_id: (1..4094).
Displays ACLs assigned to interfaces.
clear access-lists counters
[gigabitethernet gi_port |
tengigabitethernet te_port |
fortygigabitethernet fo_port |
port-channel group |
vlan vlan_id]
gi_port: (1..8/0/1..48);
te_port: (1..8/0/1..24);
fo_port: (1..8/0/1..4);
group: (1..16);
vlan_id: (1..4094).
Reset all ACL counters or ACL counters for the specified
interface.
show interfaces access-lists
trapped packets
[gigabitethernet gi_port |
tengigabitethernet te_port |
fortygigabitethernet fo_port |
port-channel group |
vlan vlan_id]
gi_port: (1..8/0/1..48);
te_port: (1..8/0/1..24);
fo_port: (1..8/0/1..4);
group: (1..16);
vlan_id: (1..4094).
EXEC mode commands
Command line in the EXEC mode appears as follows:
console#
Table 5.203. ACL display commands
show time-range
[time_name]
Display the time-range configuration.
11.3.1 IPv4-based ACL Configuration
This section provides description of main parameters and their values for IPv4-based ACL
configuration commands. In order to create an IPv4-based ACL and enter its configuration mode, use the
following command: ip access-list extended access-list. For example, to create an ACL
named EltexAL, execute the following command:
console#
console# configure
console(config)# ip access-list extended EltexAL
console(config-ip-al)#
Table 5.204. Main command parameters
Create a ‘permit’ filtering rule in the ACL.
Create a ‘deny’ filtering rule in the ACL.
This field is used to specify the protocol value (or all protocols)
which will be used to filter traffic. The following protocol
values are available: icmp, igmp, ip, tcp, egp, igp, udp, hmp,
rdp, idpr, ipv6, ipv6:rout, ipv6:frag, idrp, rsvp, gre, esp, ah,
ipv6:icmp, eigrp, ospf, ipinip, pim, l2tp, isis, ipip, or the
numeric value of the protocol number (0–255).
To match all protocols, specify the value ip.