Samsung WEC8500 Operation Manual page 445

8.7.3.1 Configuring Acl
The basic settings of the ACL profile are as follows:
Remote IP Acl which is used in Remote Acl Profile can not be deleted. So if you want to
delete Acl which is used in Remote Acl Profile, you have to delete this Acl in Acl list of
Remote IP Acl Profile.
Configuration using CLI
Example:
WEC8500# configure terminal
WEC8500/configure# rbac
WEC8500/configure/rbac# remote
WEC8500/configure/rbac/remote # access-list ip acl1 permit seq 1 * any
any os-aware
WEC8500/configure/rbac/remote # access-list ip acl2 permit seq 2 * any
any os-aware
WEC8050/configure/rbac/remote# update access-list ip acl1 permit seq 1
tcp any eq * any eq * os-aware *
WEC8500/configure/rbac/remote # end
WEC8500# configure terminal
WEC8500/configure# rbac
WEC8500/configure/rbac# remote
WEC8500/configure/rbac/remote # no access-list ip acl2 permit seq 2 *
any any os-aware
CLI for confirming configuration:
WEC8500# show rbac remote ip-acl
================ LocalSwAclProfile ================
access-list ip acl1 permit seq 1 tcp any eq * any eq * os-aware *
© SAMSUNG Electronics Co., Ltd.
CHAPTER 8. Security
page 445 of 689