Table of Contents
Advertisement
Command Reference Guide
Once the access map has been created and associated with a hardware ACL, it must be applied to a virtual
local area network (VLAN) for the ACL to be fully functional. Access maps can be applied to a single
VLAN or a range of VLANs, however, only one access map can be applied to a VLAN at a time.
To create an IP hardware ACL and enter the ACL's configuration, enter the command
extended <name> on page 1032
>enable
#configure terminal
(config)#ip hw-access-list extended Trusted
Configuring New IP Hardware Extended ACL "Trusted"
(config-ext-ip-hw-nacl)#
To create a MAC hardware ACL and enter the ACL's configuration, enter the command
hw-access-list extended <name> on page 1257
>enable
#configure terminal
(config)#mac hw-access-list extended Untrusted
Configuring New MAC Hardware Extended ACL "Untrusted"
(config-ext-mac-hw-nacl)#
To create a hardware access map and enter the map's configuration, enter the command
<name> on page 976
from the Global Configuration mode prompt. For example:
>enable
#configure terminal
(config)#hw-access-map Map1
(config-hw-access-map)#
Technology Review
Hardware access maps and ACLs regulate traffic through the routed network. When designing your traffic
flow configuration, it is important to keep the following in mind:
•
A hardware ACL serves as a traffic selector, defining exactly which frames should take the given action.
•
A hardware access map defines the action to take on the frames selected by the ACL.
•
A hardware ACL is inactive until it is assigned to an active hardware access map.
•
A hardware access map is inactive until it is assigned to a VLAN interface.
For more information on both hardware ACLs and hardware access maps, refer to the
Hardware ACLs in AOS configuration guide available online at
https://supportforums.adtran.com
The following commands are common to multiple command sets and are covered in a centralized section
of this guide. For more information, refer to the sections listed below:
cross-connect on page 67
60000CRG0-35E
from the Global Configuration mode prompt. For example:
from the Global Configuration mode prompt. For example:
(article number 3088).
Copyright © 2012 ADTRAN, Inc.
Hardware ACLs and Hardware Access Maps
ip hw-access-list
mac
hw-access-map
3110
Advertisement
Table of Contents
