Command Line Interface
690 1553-KDU 137 365 Uen D 2006-06-16
7.8 Access Control List Commands
Access Control Lists (ACL) provide packet filtering for IP frames (based on
address, protocol, Layer 4 protocol port number or TCP control code), any
frames (based on MAC address or Ethernet type), or for frame types within a
specified VLAN. To filter packets, first create an access list, add the required
rules, specify a mask to modify the precedence in which the rules are checked,
and then bind the list to a specific port. This section describes the Access
Control List commands.
Table 67 Access Control List Commands
Command Groups Function Page
IP ACLs Configures ACLs based on IP addresses, TCP/UDP port
number, protocol type, and TCP control code
691
MAC ACLs Configures ACLs based on hardware addresses, packet
format, and Ethernet type
707
VLAN ACLs Configures ACLs for filtering VLAN ingress traffic based on
the frame types matched within specific IP or MAC ACLs
719
ACL Information Displays ACLs and associated rules; shows ACLs assigned
to each port
733