Determining The Ace Order; Committing A Security Acl; Viewing Security Acl Information - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

The set security acl command creates a new entry in the edit buffer and appends the new entry as
a rule at the end of an ACL, unless you specify otherwise. The order of ACEs is significant, because
the earliest ACE takes precedence over later ACEs. To place the ACEs in the correct order, use the
parameters before editbuffer-index and modify editbuffer-index. The first ACE is number 1.
To specify the order of the commands, use the following parameters:
• before editbuffer-index inserts an ACE before a specific location.
• modify editbuffer-index changes an existing ACE.
If the security ACL you specify when creating an ACE does not exist when you enter set security acl
ip, the specified ACL is created in the edit buffer. If the ACL exists but is not in the edit buffer, the ACL
reverts, or is rolled back, to the state when its last ACE was committed, but it now includes the new
ACE.
To put the security ACLs you have created into effect, use the commit security acl command with the
name of the ACL. For example, to commit acl-99, type the following command:
DWS-1008# commit security acl acl-99
success: change accepted.
To commit all the security ACLs in the edit buffer, type the following command:
DWS-1008# commit security acl all
success: change accepted.

Viewing Security ACL Information

To determine whether a security ACL is committed, you can check the edit buffer and the committed
ACLs. After you commit an ACL, MSS removes it from the edit buffer.
To display ACLs, use the following commands:
show security acl editbuffer
show security acl info all editbuffer
show security acl info
show security acl
D-Link DWS-1008 User Manual

Determining the ACE Order

Committing a Security ACL

1