Table of Contents
Advertisement
•
assign-queue queue-id—Specifies the assign-queue, which is the queue
identifier to which packets matching this rule are assigned. The queue ID
is the internal queue number (traffic class), not the CoS value. Use the
show classofservice command to display the assignment of CoS and DSCP
values to internal queue numbers.
•
{mirror | redirect} interface-id—Specifies the mirror or redirect Ethernet
interface to which packets matching this rule are copied or forwarded,
respectively.
rate-limit rate burst-size—Specifies the allowed rate of traffic as per the
•
configured rate in Kbps, and burst-size in kbytes. Rate limits only apply to
permit rules.
–
Rate – the committed rate in kilobits per second
–
Burst-size – the committed burst size in Kilobytes.
Default Configuration
No ACLs are configured by default. An implicit deny all condition is added by
the system after the last MAC or IP/IPv6 access group if no route-map is
configured on the interface.
Command Mode
Ipv4-Access-List Configuration mode
User Guidelines
Administrators are cautioned to specify permit and deny rule matches as fully
as is possible in order to avoid false matches. Rules that specify an IP port
value should also specify the protocol (TCP or UDP) and relevant IP
addresses or subnets. In general, any rule that specifies matching on an upper
layer protocol field should also include matching constraints for lower layer
protocol fields. For example, a rule to match packets directed to the well-
known UDP port number 22 (SSH) should also include constraints on the IP
protocol field (UDP). IPv4 and IPv6 ACLs implicitly include the EtherType
in the match criteria. Below is a list of commonly used EtherTypes:
Ethertype
0x0800
Protocol
Internet Protocol version 4 (IPv4)
Layer 2 Switching Commands
268
Advertisement
Table of Contents
