Ip Access Control List (Acl) Commands; Section 13.8 "Ip Access Control List (Acl) Commands - NETGEAR GSM7224R - ProSafe Switch Cli Reference Manual

Command Line Interface Reference for the ProSafe 7200R Series Layer-2 Switches with Static
Action
Source MAC
Address
Destination MAC
Address
Ethertype
VLAN ID
COS
Assign Queue
Redirect
Interface

13.8 IP Access Control List (ACL) Commands

This section describes the commands you use to configure IP ACL settings. IP ACLs
ensure that only authorized users have access to specific resources and block any
unwarranted attempts to reach network resources.
The following rules apply to IP ACLs:
• The 7200R Series Managed Switch does not support IP ACL configuration for IP
packet fragments.
• The maximum number of ACLs you can create is 100, regardless of type.
• The maximum number of rules per IP ACL is hardware dependent.
• If you configure a MAC ACL on an interface, you cannot configure an IP ACL on the
same interface.
• Wildcard masking for ACLs operates differently from a subnet mask. A wildcard
mask is in essence the inverse of a subnet mask. With a subnet mask, the mask has
ones (1's) in the bit positions that are used for the network address, and has zeros (0's)
for the bit positions that are not used. In contrast, a wildcard mask has (0's) in a bit
position that must be checked. A '1' in a bit position of the ACL mask indicates the
corresponding bit can be ignored.
13-36
Displays the action associated with each rule. The possible
values are Permit or Deny.
Displays the source MAC address for this rule.
Displays the destination MAC address for this rule.
Displays the Ethertype keyword or custom value for this rule.
Displays the VLAN identifier value or range for this rule.
Displays the COS (802.1p) value for this rule.
Displays the queue identifier to which packets matching this
rule are assigned.
Displays the slot/port to which packets matching this rule are
forwarded.
v1.0, November 2007
Quality of Service (QoS) Commands