D-Link DXS-1210-12TC Reference Manual page 41

This example shows how to specify the IP accesslist "Strict-Control" as an IP access group for an
Ethernet port 1/0/2.
Switch# configure terminal
Switch(config)#interface eth 1/0/2
Switch(config-if)#ip access-group Strict-Control
The remaining applicable IP related access entries are 526
Switch(config-if)#
4-7 ip access-list
This command is used to create or modify an IP access list. This command will enter into the IP
accesslist configuration mode. Use the no form of this command toremove an IP accesslist.
ip access-list [extended] NAME [NUMBER]
no ip access-list [extended] {NAME | NUMBER}
Parameters
extended
NAME
NUMBER
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The name must be unique among all accesslists. The characters used in the name are case
sensitive.If the accesslist number is not specified, the biggest unused number in the range of IP
access list numbers will be assigned automatically.
Example
This example shows how to configure an extended IP accesslist, named "Strict-Control" and an IP
access-list, named "pim-srcfilter".
Switch# configure terminal
Switch(config)#ip access-list extended Strict-Control
Swtich(config-ip-ext-acl)# rule permit tcp any 10.20.0.0 255.255.0.0
Swtich(config-ip-ext-acl)# exit
Swtich(config)# ip access-list pim-srcfilter
Switch(config-ip-acl)# rule permit host 172.16.65.193 any
Switch(config-ip-acl)#
DXS-1210 Series Smart Managed Switch CLI Reference Guide
(Optional) Specifies that without this option the IP access list is a
standard IP access list. When using the extended option, more fields
can be chosen for the filter.
Specifies the name of the IP accesslist to be configured. The
maximum length is 32 characters. The first character must be a letter.
Specifies the ID number of the IP access list. For standard IP access
lists, this value is from 1 to 1999. For extended IP access lists, this
value is from 2000 to 3999.
38