3Com WX4400 Command Reference Manual page 510

510 C 14: S
HAPTER ECURITY
ACL C
OMMANDS
Syntax —
set security acl map acl-name
[
port port-list
acl-name — Name of an existing security ACL to map. ACL names
start with a letter and are case-insensitive.
vlan vlan-id
ACL to the specified VLAN.
port port-list
specified physical WX port or ports.
tag tag-list
VLAN. Specify a single tag value from 1 through 4095. Or specify a
comma-separated list of values, a hyphen-separated range, or any
combination, with no spaces. MSS assigns the security ACL to the
specified virtual port or ports.
— One or more Distributed MAPs, based on their
dap dap-num
connection IDs. Specify a single connection ID, or specify a
comma-separated list of connection IDs, a hyphen-separated range, or
any combination, with no spaces. MSS assigns the security ACL to the
specified Distributed MAPs.
— Assigns the security ACL to traffic coming into the WX switch.
in
— Assigns the security ACL to traffic coming from the WX switch.
out
Defaults — None.
Access — Enabled.
History — Introduced in MSS Version 3.0.
Usage — Before you can map a security ACL, you must use the
commit security acl command to save the ACL in the running
configuration and nonvolatile storage.
For best results, map only one input security ACL and one output security
ACL to each VLAN, physical port, virtual port, or Distributed MAP to filter
a flow of packets. If more than one security ACL filters the same traffic,
MSS applies only the first ACL match and ignores any other matches.
Examples — The following command maps security ACL acl_133 to
port 4 for incoming packets:
WX4400 set security acl map acl_133 port 4 in
success: change accepted.
] |
tag tag-list dap dap-num
— VLAN name or number. MSS assigns the security
— Port list. MSS assigns the security ACL to the
— One or more values that identify a virtual port in a
{v |
lan vlan-id
} { | }
in out