Supermicro SSE-F3548S - ACL Egress Port Configuration

Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
233
Step 1
configure terminal
Enters the configuration mode
Step 2
interface <interface-type><interface-
id>
or
interface range <interface-type><interface-id> ….
The port or port lists from which this IP
Standard or Extended ACL needs to be
removed
Step 3
no ip access-group[ { <access-list-number (1-
65535)> | <access-list-name> } ] in
Removes the IP Standard / Extended
ACL from this ingress port
access-list-number – the ACL number
that needs to be removed from this
interface
access-list-name – the name of the ACL
that needs to be removed from this
interface
Step 4
show access-lists
Displays the configured ACL rules to
make sure this port has been removed
from the required ACL
Step 5
write startup-config
Optional step – Saves this ACL
configuration to be part of startup
configuration.
1. When an IP Standard/Extended ACL is removed from all the ports it was applied to,
that ACL will become a switch wide ACL (applied to all physical ports).
2. IP Standard and Extended ACLs can be added only to physical ports like fx or cx
ports. ACLs cannot be added to Layer 3 vlan interfaces or port channel interfaces
3. An IP Standard/Extended ACL can be applied to many ports by following the above
steps. In the same way, many IP Standard/Extended ACLs can be applied on a single
port.
The example below shows the commands used for removing an IP Extended ACL from a port.
SMIS# configure terminal
SMIS(config)# int fx 0/1
SMIS(config-if)# no ip access-group 100 in
8.3.6 ACL Egress Port Configuration
User can associate an ACL with only one egress port. Follow the steps below to configure the egress port
to an ACL.
Step
Command
Description
Step 1
configure terminal
Enters the configuration mode
Step 2
interface <interface-type><interface-id>
Defines the egress port on which this IP
Standard / Extended ACL needs to be
applied
Step 3
ip access-group { <access-list-number (1-32768)>
Adds the IP Standard / Extended ACL to