Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 771

IP 4 H A C
V ARDWARE CCESS ONTROL
- (
ACCESS LIST NUMBERED HARDWARE
Mode Global Configuration
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage This command creates an ACL for use with hardware classification. Once you have
configured the ACL, use the
apply this ACL to a port or QoS class-map.
ACLs numbered in the range 3000-3699 match on packets that have the specified
source and destination IP addresses.
You can use ACLs to redirect packets, by sending them to the CPU. Use such ACLs
with caution. They could prevent control packets from reaching the correct
destination, such as EPSR healthcheck messages and VCStack messages.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To create an access-list that will deny all IGMP packets (IP protocol 2) from the
192.168.0.0 network, enter the commands:
awplus#
awplus(config)#
any
To destroy the access-list with an access-list identity of 3000 enter the following
commands:
awplus#
awplus(config)#
Related access-group
Commands
match access-group
show running-config
show access-list (IPv4 Hardware ACLs)
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
ACL IP )
FOR PROTOCOLS
configure terminal
access-list 3000 deny proto 2 192.168.0.0/16
configure terminal
no access-list 3000
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
access-group or the match access-group command to
771