Table of Contents
Advertisement
Parameter
Service
Action
Timerange
Log
Expired
Queue
Tos
8021.p
Blacklist
Mirror
DisScan
IPv4/6
Related Commands
Command
ip access-list session
Command History
Introduced in ArubaOS 3.0.
1066 | show ip access-list
Description
user: The IP address of the user.
l
:
localip
The set of all local IP addresses on the system, on which the ACL is applied
l
Network service, which can be one of the following:
An IP protocol number (0-255).
l
The name of a network service (use the show netservice command to see configured services).
l
any: Matches any traffic.
l
tcp: A TCP port number (0-65535).
l
udp: A UDP port number (0-65535).
l
Action if rule is applied, which can be one of the following:
deny: Reject packets.
dst-nat: Perform destination NAT on packets.
dual-nat: Perform both source and destination NAT on packets.
permit: Forward packets.
redirect: Specify the location to which packets are redirected, which can be one of the following:
Datapath destination ID (0-65535).
l
esi-group: Specify the ESI server group configured with the esi group command
l
opcode: Specify the datapath destination ID (0x33, 0x34, or 0x82). Do not use this parameter without
l
proper guidance from Dell.
tunnel: Specify the ID of the tunnel configured with the interface tunnel command.
src-nat: Perform source NAT on packets.
Any defined time range for this rule.
Shows if the rule was configured to generate a log message when the rule is applied.
Shows if the rule has expired.
Shows if the rule assigns a matching flow to a priority queue (high/low).
802.11p priority level applied by the rule (0-7).
Shows if the rule should blacklist any matching user.
Shows if the rule was configured to mirror all session packets to datapath or remote destination.
Shows if the rule was configured to pause ARM scanning while traffic is present.
Shows the IP version.
Description
Configure an access list for an interface.
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
.
Advertisement
Table of Contents
