Table of Contents
Advertisement
ip access-group
Notes
1.
If
filter
cannot be set. (This command can be set if the
set.)
2.
One IPv4 filter can be set for one interface. A maximum of 128 filters can be applied
to an Ethernet interface or a VLAN interface. If a filter has already been set, first
remove it and then set it again.
3.
If a non-existent IPv4 filter is set, no operation is performed. The identifier of the IPv4
filter is registered.
4.
The flow detection mode that can be set is Layer 2-2. The following table describes
whether an interface can be set.
Table 19-9 Specifiable interfaces for each flow detection mode (IPv4)
Flow detection mode
Layer 2-1
Layer 2-2
Legend Y: Can be set; N: Cannot be set
5.
When IPv4 packet filtering is applied to an Ethernet interface, the flow detection
mode can be set if a VLAN parameter exists as a flow detection condition and the
VLAN ID is included in the Ethernet interface settings.
6.
When IPv4 packet filtering is applied to a VLAN interface, the flow detection mode
can be set if no VLAN parameters are included as a flow detection condition.
Related commands
ip access-list standard
ip access-list extended
292
was not set when the
system function
Whether the mode can be set
Ethernet
N
Y
command was set, this command
system function
command was not
VLAN
N
Y
Advertisement
Table of Contents
