Table of Contents
Advertisement
•
log—Specifies that this rule is to be logged when the rule has been
matched one or more times since the expiry of the last logging interval.
The logging interval is five minutes.
•
time-range time-range-name—Allows imposing time limitation on the
ACL rule as defined by the parameter time-range-name. If a time range
with the specified name does not exist and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, then the ACL rule is
applied immediately. If a time range with specified name exists and the
ACL containing this ACL rule is applied to an interface or bound to a
VLAN, then the ACL rule is applied when the time-range with specified
name becomes active. The ACL rule is removed when the time-range with
specified name becomes inactive.
•
assign-queue queue-id—Specifies the assign-queue, which is the queue
identifier to which packets matching this rule are assigned.
•
{mirror | redirect} interface-id—Specifies the mirror or redirect Ethernet
interface to which packets matching this rule are copied or forwarded,
respectively.
•
rate-limit rate burst-size—Specifies the allowed rate of traffic as per the
configured rate in Kbps, and burst-size in kbytes.
–
Rate – the committed rate in kilobits per second
–
Burst-size – the committed burst size in Kilobytes.
Default Configuration
An implicit deny all condition is added by the system after the last MAC or
IP/IPv6 access group if no route-map is configured on the interface.
Command Mode
IPv6-Access-List Configuration mode
User Guidelines
Users are permitted to add rules, but if a packet does not match any user-
specified rules, the packet is dropped by the implicit "deny all" rule.
In order to provide the greatest amount of flexibility in configuring ACLs, the
permit/deny syntax allows combinations of matching criteria that may not
make sense when applied in practice.
Layer 2 Switching Commands
502
Advertisement
Table of Contents
