Access-List; Commands In This Chapter - Dell Networking 7048 Reference Manual

Commands in this Chapter

This chapter explains the following commands:

access-list

deny | permit (IP ACL)
deny | permit (Mac-Access-List-
Configuration)
ip access-group
mac access-group
mac access-list extended
access-list
Use the access-list command in Global Configuration mode to create an
Access Control List (ACL) that is identified by the parameter
The command specifies the queue identifier to which packets matching this
rule are assigned. The command may also specify the mirror or redirect
interface (unit/slot/port) to which packets matching this rule are copied or
forwarded, respectively.
The time-range parameter allows imposing time limitation on the ACL rule
as defined by the parameter
specified name does not exist, and the ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the ACL rule is applied
immediately. If a time range with specified name exists and the ACL
containing this ACL rule is applied to an interface or bound to a VLAN, then
the ACL rule is applied when the time-range with specified name becomes
active. The ACL rule is removed when the time-range with specified name
becomes inactive.
list-name
access-list
number
udp |
portkey
[{eq {
dscp
]}[log] [time-range
interface-id
| redirect}
list-name
no access-list
292
ACL Commands
time-range-name
{deny | permit} {every | {{icmp | igmp | ip | tcp |
srcip srcmask
} any|
0-65535
| }] [precedence
time-range-name
]
mac access-list extended rename
service-acl input
show service-acl interface
show ip access-lists
show mac access-list
–
. If a time range with the
portkey 0-65535
[{eq { |
precedence
] [assign-queue
list-name
dstip dstmask
}]
tos tosmask
| tos
queue-id
] [{mirror
.
| dscp