Supermicro SSE-F3548S - Page 239

Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
239
IP header. This TOS configuration is
optional.
To apply this rule to packets with
specified DSCP values, use the keyword
dscp and the specific DSCP values to be
matched. Users can specify any DSCP
values from 0 to 63. The DSCP
configuration is optional.
The priority keyword lets users assign a
priority for this ACL rule.
This priority is an optional parameter. It
may be any value from 1 to 255. The
default value is 1.
Redirect ACL rules need additional
<interface-type><interface-
id>parameters to provide the port to
which the packets matching this ACL
rule should be redirected.
Step 4
show access-lists
Displays the configured ACL rule
Step 5
write startup-config
Optional step – Saves this ACL
configuration to be part of startup
configuration.
The examples below show various ways to create an IP Extended ACL for IP traffic.
Create a deny IP Extended ACL with ACL number 100 to deny all traffic from IP 172.10.10.10 with TOS8.
SMIS# configure terminal
SMIS(config)# ip access-list extended 100
SMIS(config-ext-nacl)# deny ip host 172.10.10.10 any tos 8
Create a deny IP ExtendedACL with ACL name acl_cw3 to deny all OSPF packets from network 172.20.1.0.
SMIS# configure terminal
SMIS(config)# ip access-list extended acl_cw3
SMIS(config-ext-nacl)# deny ospf 172.20.1.0 255.255.255.0 any
Create a redirect IP Extended ACL to redirect all packets from subnet 172.20.20.X going to IP
172.20.0.1with DSCP value 10 to interface fx 0/10.
SMIS# configure terminal
SMIS(config)# ip access-list extended 100