Supermicro SSE-F3548S - Page 230

Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
230
address><mask> } [ { any | host<dest-ip-
address> | <dest-ip-address><mask> } ]
[priority<value (1-255)>]
or
1. redirect<interface-type><interface-id> {
any | host<src-ip-address> | <src-ip-
address><mask> } [ { any |
host<dest-ip-address> | <dest-ip-
address><mask> } ] [priority<value (1-
255)>]
IP addresses.
To configure a network IP, address and
mask should be provided.
A redirect ACL rule needs additional
<interface-type><interface-
id>parameters to definethe port to
which the packets matching this ACL
rule need to be redirected.
The priority keyword lets user assign a
priority for this ACL rule.
This priority is an optional parameter. It
can be any value from 1 to 255. The
default value is 1.
Step 4
show access-lists
Displays the configured ACL rule
Step 5
write startup-config
Optional step – Saves this ACL
configuration to be part of startup
configuration.
Every ACL is applied to all ports by default. If any ACL needs to be applied only to particular
ports, it needs to be configured as described in section Applying IP ACL to Interfaces.
The examples below show different ways to create IP Standard ACLs.
Create a deny IP Standard ACL with ACL number 100 to deny all traffic from IP 172.10.10.10 to IP
172.10.10.1
SMIS# configure terminal
SMIS(config)# ip access-list standard 100
SMIS(config-std-nacl)# deny host 172.10.10.10 host 172.10.10.1
Create a permit IP Standard ACL with ACL name acl_cw3 to permit all traffic from IP 172.10.10.1
SMIS# configure terminal
SMIS(config)# ip access-list standard acl_cw3
SMIS(config-std-nacl)# permit host 172.10.10.1 any
Create a redirect IP Standard ACL to redirect all packets from subnet 172.20.20.X going to IP 172.20.0.1 to
interface fx 0/10.
SMIS# configure terminal
SMIS(config)# ip access-list standard 1