Ip Acls; Table 4-32 Access Control List Commands; Table 4-33 Ip Acl Commands - Edge-Core ES4612 Management Manual

4
Command Line Interface
The order in which active ACLs are checked is as follows:
1. User-defined rules in the Egress MAC ACL for egress ports.
2. User-defined rules in the Egress IP ACL for egress ports.
3. User-defined rules in the Ingress MAC ACL for ingress ports.
4. User-defined rules in the Ingress IP ACL for ingress ports.
5. Explicit default rule (permit any any) in the ingress IP ACL for ingress ports.
6. Explicit default rule (permit any any) in the ingress MAC ACL for ingress ports.
7. If no explicit rule is matched, the implicit default is permit all.
Masks for Access Control Lists
You must specify masks that control the order in which ACL rules are checked. The
switch includes two system default masks that pass/filter packets matching the
permit/deny the rules specified in an ingress ACL. You can also configure up to
seven user-defined masks for an ACL. A mask must be bound exclusively to one of
the basic ACL types (i.e., Ingress IP ACL, Egress IP ACL, Ingress MAC ACL or
Egress MAC ACL), but a mask can be bound to up to four ACLs of the same type.
Command Groups

IP ACLs

MAC ACLs
ACL Information
IP ACLs
Command
access-list ip
permit, deny
permit, deny
show ip access-list
access-list ip
mask-precedence
mask
show access-list ip
mask-precedence
ip access-group
show ip access-group
map access-list ip
4-88

Table 4-32 Access Control List Commands

Function
Configures ACLs based on IP addresses, TCP/UDP port number,
protocol type, and TCP control code
Configures ACLs based on hardware addresses, packet format, and
Ethernet type
Displays ACLs and associated rules; shows ACLs assigned to each port 4-112

Table 4-33 IP ACL Commands

Function
Creates an IP ACL and enters configuration mode
Filters packets matching a specified source IP address
Filters packets meeting the specified criteria, including
source and destination IP address, TCP/UDP port number,
protocol type, and TCP control code
Displays the rules for configured IP ACLs
Changes to the mode for configuring access control masks GC
Sets a precedence mask for the ACL rules
Shows the ingress or egress rule masks for IP ACLs
Adds a port to an IP ACL
Shows port assignments for IP ACLs
Sets the CoS value and corresponding output queue for
packets matching an ACL rule
Page
4-88
4-102
Mode Page
GC 4-89
STD-ACL 4-90
EXT-ACL 4-91
PE 4-93
4-93
IP-Mask 4-94
PE 4-97
IC 4-98
PE 4-98
IC 4-99