Extreme Networks EAS 100-24t Switch CLI User Manual

Chapter 8: Access Control List (ACL)
Extreme Networks EAS 100-24t Switch CLI Manual
230
Example usage:
To delete the access profile with a profile ID of 1:
Parameters profile_id <value 1-256> - Enter an integer between 1 and 256 that is used to
identify the access profile that will be deleted with this command. This value is
assigned to the access profile when it is created with the create
access_profile command. The user may enter a profile ID number between 1
and 256.
all - Specifies all access list profiles will be deleted.
Restrictions Only Administrator-level users can issue this command.
# delete access_profile profile_id 1
Command: delete access_profile profile_id 1
Success.
#
create access_profile
Purpose Used to configure an access profile on the switch and to define specific values
that will be used to by the switch to determine if a given packet should be
forwarded or filtered. Masks entered using the create access_profile
command will be combined, using a logical AND operational method, with the
values the switch finds in the specified frame header fields. Specific values for
the rules are entered using the config access_profile command, below.
Syntax config access_profile profile_id <value 1-256> [add access_id
[auto_assign | <value 1-65535>] [ethernet {[vlan <vlan_name 32> | vlan_id
<vid> {mask <hex 0x0-0x0fff>}] | source_mac <macaddr> {mask
<macmask>} | destination_mac <macaddr> {mask <macmask>} | 802.1p
<value 0-7> | ethernet_type <hex 0x0-0xffff>}(1) | ip {[vlan <vlan_name
32> | vlan_id <vid> {mask <hex 0x0-0x0fff>}] | source_ip <ipaddr> {mask
<netmask>} | destination_ip <ipaddr> {mask <netmask>} | dscp <value 0-
63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value
0-255>} | tcp {src_port <value 0-65535> {mask <hex 0x0-0xffff>} | dst_port
<value 0-65535> {mask <hex 0x0-0xffff>} | flag [all | {urg | ack | psh | rst |
syn | fin}]} | udp {src_port <value 0-65535> {mask <hex 0x0-0xffff>} |
dst_port <value 0-65535> {mask <hex 0x0-0xffff>}} | protocol_id <value 0-
255>]}(1) | ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> |
source_ipv6 <ipv6addr> {mask <ipv6mask>} | [tcp {src_port <value 0-
65535> {mask <hex 0x0-0xffff>} | dst_port <value 0-65535> {mask <hex
0x0-0xffff>}}(1) | udp {src_port <value 0-65535> {mask <hex 0x0-0xffff>} |
dst_port <value 0-65535> {mask <hex 0x0-0xffff>}}]} | packet_content
{offset1 <hex 0x0-0xffffffff> {mask <hex 0x0-0xffffffff>} | offset2 <hex 0x0-
0xffffffff> {mask <hex 0x0-0xffffffff>} | offset3 <hex 0x0-0xffffffff> {mask
<hex 0x0-0xffffffff>}| offset4 <hex 0x0-0xffffffff> {mask <hex 0x0-
0xffffffff>} | } ] port [<portlist> | all ] [ permit{ priority <value 0-7>
{replace_priority} | replace_dscp_with <value 0-63> | counter [enable |
disable] }|deny|mirror ] | delete access_id <value 1-65535> ]
Description This command is used to configure an access profile on the switch and to
enter specific values that will be combined, using a logical AND operational
method, with masks entered with the create access_profile command,
above.
delete access_profile

Extreme Networks EAS 100-24t Switch CLI Specifications

General

Brand	Extreme Networks
Model	EAS 100-24t Switch CLI
Category	Switch
Language	English