ADTRAN AOS Version R10.1.0 Command Reference Manual page 3121

Command Reference Guide
forward ip <acl name>
Use the forward ip command to specify which IP hardware access control list (ACL) the hardware access
map will use to determine which frames to forward. Use the no form of this command removes this action
from the access map. Variations of this command include:
forward ip <acl name>
forward ip <acl name> and mac <acl name>
Syntax Description
<acl name>
mac <acl name>
and
Default Values
By default, all AOS security features are disabled, and there are no configured hardware access maps.
Command History
Release 17.6
Functional Notes
Hardware access maps can only forward traffic. This action can be performed based on the criteria
outlined in a single IP hardware ACL, a single MAC hardware ACL, or both. Like the hardware ACLs, the
hardware access map will match traffic in top-down order. Use the forward ip command if the first criteria
for the access map is to match traffic based on IP information.
Specifying and indicates to the access map that both ACLs must conclude the frame should be forwarded
for the access map to forward it.
If you configure the access map to reference a nonexistent IP or MAC hardware ACL, the ACL will be
created. Note that this newly created ACL will have permit any as the default entry because no other
entries are present.
Hardware access maps are not active until they are applied to a virtual local area network (VLAN). For
instructions on how to apply an access map to a VLAN, refer to
60000CRG0-35E
Specifies the hardware ACL the access map will use when determining
which traffic to forward.
Specifies the medium access control (MAC) hardware ACL that the access
map will use in conjunction with the IP hardware ACL to determine which
traffic to forward.
Specifies that the relationship between the IP and MAC ACLs is such that
the access map will forward traffic only if both ACLs indicate that it should
be forwarded.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Hardware ACLs and Hardware Access Maps
vlans <vlan id> on page 3125.
3121