Configure Access-List Add - Extreme Networks ExtremeWare XOS Command Reference Manual

configure access-list add

configure access-list add <dynamic_rule> [after <rule> | before <rule> |
first | last][any | ports <portlist> | vlan <vlanname>] {ingress | egress}
Description
Configures a dynamic ACL rule to the specified interface.
Syntax Description
dynamic_rule
after <rule>
before <rule>
first
last
any
portlist
vlanname
ingress
egress
Default
The default direction is ingress.
Usage Guidelines
The dynamic rule must first be created before it can be applied to an interface. Use the following
command to create a dynamic rule:
create access-list <dynamic-rule> <conditions> <actions>
When a dynamic ACL rule is applied to an interface, you will specify its precedence among any
previously applied dynamic ACLs. All dynamic ACLs have a higher precedence than any ACLs applied
through ACL policy files.
Specifying the keyword
any
This ACL is evaluated for ports without a specific ACL applied to it, and is also applied to packets that
do not match the ACL applied to the interface.
Example
The following command applies the dynamic ACL icmp-echo as the first (highest precedence) dynamic
ACL to port 1:2 at ingress:
ExtremeWare XOS 11.3 Command Reference
Specifies a dynamic ACL rule.
Add the new dynamic rule after an existing dynamic rule.
Add the new dynamic rule before an existing dynamic rule.
Add the new dynamic rule before all existing dynamic rules.
Add the new dynamic rule after all existing dynamic rules.
Specifies that this ACL is applied to all interfaces as the lowest precedence
dynamic ACL.
Specifies the ports on which this ACL is applied.
Specifies the VLAN on which this ACL is applied.
Apply the ACL to packets entering the switch on this interface.
Apply the ACL to packets leaving the switch from this interface (BlackDiamond
10K only).
applies the ACL to all the ports, and is referred to as the wildcard ACL.
configure access-list add
663