Configuring Ip Acls; Creating An Ip Acl; Changing An Ip Acl - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring IP ACLs

Configuring IP ACLs

Creating an IP ACL

You can create an IPv4 or IPv6 ACL on the switch and add rules to it.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
The following example shows how to create an IPv4 ACL:
switch# configure terminal
switch(config)# ip access-list acl-01
switch(config-acl)# permit ip 192.168.2.0/24 any
switch(config-acl)# statistics
The following example shows how to create an IPv6 ACL:
switch# configure terminal
switch(config)# ipv6 access-list acl-01-ipv6
switch(config-ipv6-acl)# permit tcp 2001:0db8:85a3::/48 2001:0db8:be03:2112::/64

Changing an IP ACL

You can add and remove rules in an existing IPv4 or IPv6 ACL. You cannot change existing rules. Instead,
to change a rule, you can remove it and recreate it with the desired changes.
If you need to add more rules between existing rules than the current sequence numbering allows, you can
use the resequence command to reassign sequence numbers.
OL-16597-01
Command or Action
switch# configure terminal
switch(config)# {ip | ipv6 }
access-list name
switch(config-acl)#
[sequence-number] {permit|deny}
protocol source destination
switch(config-acl)# statistics
switch# show {ip | ipv6} access-lists
name
switch# copy running-config
startup-config
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Purpose
Enters configuration mode.
Creates the IP ACL and enters IP ACL configuration
mode. The name argument can be up to 64 characters.
Creates a rule in the IP ACL. You can create many rules.
The sequence-number argument can be a whole number
between 1 and 4294967295.
The permit and deny commands support many ways of
identifying traffic. For more information, see the Cisco
Nexus 5000 Series Command Reference.
(Optional)
Specifies that the switch maintains global statistics for
packets matching the rules in the ACL.
(Optional)
Displays the IP ACL configuration.
(Optional)
Copies the running configuration to the startup
configuration.
Creating an IP ACL
283