Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 764

IP 4 H A C
V ARDWARE CCESS ONTROL
- (
ACCESS LIST NUMBERED HARDWARE
Mode Global Configuration
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage This command creates an ACL for use with hardware classification. Once you have
configured the ACL, use the
apply this ACL to a port or QoS class-map.
ACLs numbered in the range 3000-3699 match on packets that have the specified
source and destination IP addresses.
ICMP ACLs will match any ICMP packet that has the specified source and
destination IP addresses and ICMP type. The ICMP type is an optional parameter.
You can use ACLs to redirect packets, by sending them to the CPU. Use such ACLs
with caution. They could prevent control packets from reaching the correct
destination, such as EPSR healthcheck messages and VCStack messages.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To create an access-list that will permit ICMP packets with a source address of
192.168.1.0/24 with any destination address and an ICMP type of 5 enter the
following commands:
awplus#
awplus(config)#
icmp-type 5
To destroy the access-list with an access-list identity of 3000 enter the following
commands:
awplus#
awplus(config)#
Related access-group
Commands
match access-group
show running-config
show access-list (IPv4 Hardware ACLs)
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
ACL ICMP)
FOR
configure terminal
access-list 3000 permit icmp 192.168.1.0/24 any
configure terminal
no access-list 3000
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
access-group or the match access-group command to
764