Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 773

IP 4 H A C
V ARDWARE CCESS ONTROL
- (
ACCESS LIST NUMBERED HARDWARE
Mode Global Configuration
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage This command creates an ACL for use with hardware classification. Once you have
configured the ACL, use the
apply this ACL to a port or QoS class-map.
ACLs numbered in the range 4000-4699 match on packets that have the specified
source and destination MAC addresses.
You can use ACLs to redirect packets, by sending them to the CPU. Use such ACLs
with caution. They could prevent control packets from reaching the correct
destination, such as EPSR healthcheck messages and VCStack messages.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To create an access-list that will permit packets with a source MAC address of
0000.00ab.1234 and any destination address, use the commands:
awplus#
awplus(config)#
0000.0000.0000 any
To create an access-list that will permit packets if their source MAC address starts
with 0000.00ab, use the commands:
awplus#
awplus(config)#
0000.0000.FFFF any
You also need to configure the mirror port with the
To destroy the access-list with an access-list identity of 4000 enter the commands:
awplus#
awplus(config)#
Related access-group
Commands
match access-group
show running-config
show access-list (IPv4 Hardware ACLs)
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
ACL MAC )
FOR ADDRESSES
configure terminal
access-list 4000 permit 0000.00ab.1234
configure terminal
access-list 4001 permit 0000.00ab.1234
configure terminal
no access-list 4000
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
access-group or the match access-group command to
mirror interface command.
773