Access Control Configuration; Access Control List Configuration; Acl Ethernet Filter Configuration - HP 438031-B21 - 1:10Gb Ethernet BL-c Switch Cli Reference Manual

Access Control configuration

Use these commands to create Access Control Lists (ACLs) and ACL Groups. ACLs define matching criteria
used for IP filtering and Quality of Service functions.

Access Control List configuration

These commands allow you to define filtering criteria for each Access Control List (ACL). The following
table describes the basic ACL Configuration commands.
Table 155 ACL Configuration commands
Command
[no] access-control list <1-
896> egress-port <port
number>
access-control list <1-896>
action {permit|deny|set-
priority <0-7>}
access-control list <1-896>
statistics
default access-control list
<1-896>
show access-control list <1-
896>

ACL Ethernet Filter configuration

These commands allow you to define Ethernet matching criteria for an ACL. The following table describes
the Ethernet Filter Configuration commands.
Ethernet Filter Configuration commands
Table 156
Command
access-control list <1-896> ethernet
source-mac-address <MAC address>
{<MAC mask>}
access-control list <1-896> ethernet
destination-mac-address <MAC address>
{<MAC mask>}
access-control list <1-896> ethernet
vlan <1-4095> <mask>
Description
Configures the ACL to function on egress packets.
The egress port ACL will not match a Layer 2 broadcast or multicast
packet. The egress port ACL will not match packets if the destination port
is a trunk.
Command mode: Global configuration
Configures a filter action for packets that match the ACL definitions. You
can choose to permit (pass) or deny (drop) packets, or set the Class of
Service queue that handles the packets.
Command mode: Global configuration
Enables or disables the statistics collection for the Access Control List.
Command mode: Global configuration
Resets the ACL parameters to their default values.
Command mode: Global configuration
Displays the current ACL parameters.
Command mode: All except User EXEC
Description
Defines the source MAC address and MAC mask for this ACL.
For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
Command mode: Global configuration
Defines the destination MAC address and MAC mask for this
ACL. For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
Command mode: Global configuration
Defines a VLAN number and mask for this ACL.
Command mode: Global configuration
Configuration Commands
163