Chapter 26 Access Control Lists; Ipv4 Acls - Supermicro SSE-G2252 User Manual

Access Control Lists (ACL) provide packet filtering for IPv4 frames (based on address,
protocol, Layer 4 protocol port number or TCP control code), IPv6 frames (based on
address, DSCP traffic class, next header typeor any frames (based on MAC address or
Ethernet type). To filter packets, first create an access list, add the required rules, and
then bind the list to a specific port. This section describes the Access Control List
commands.
Command Group Function

IPv4 ACLs

IPv6 ACLs
MAC ACLs
ARP ACLs
ACL Information
26-1 IPv4 ACLs
The commands in this section configure ACLs based on IPv4 addresses, TCP/UDP port
number, protocol type, and TCP control code. To configure IPv4 ACLs, first create an
access list containing the required permit or deny rules, and then bind the access list to
one or more ports.
Command
access-list ip
permit, deny, redirect-to
(Standard IP ACL)
permit, deny, redirect-to
(Extended IPv4 ACL)
ip access-group
show ip access-group
show ip access-list
Chapter 26
Access Control Lists
Table 26-1. Access Control List Commands
Configures ACLs based on IPv4 addresses, TCP/UDP port number, protocol
type, and TCP control code
Configures ACLs based on IPv6 addresses or DSCP traffic class
Configures ACLs based on hardware addresses, packet format, and Ethernet
type
Configures ACLs based on ARP messages addresses
Displays ACLs and associated rules; shows ACLs assigned to each port
Table 26-2. IPv4 ACL Commands
Function
Creates an IP ACL and enters configuration mode for
standard or extended IPv4 ACLs
Filters packets matching a specified source IPv4 address
Filters packets meeting the specified criteria, including
source and destination IPv4 address, TCP/UDP port
number, protocol type, and TCP control code
Binds an IPv4 ACL to a port
Shows port assignments for IPv4 ACLs
Displays the rules for configured IPv4 ACLs
Chapter 26: Access Control Lists
26-1
Mode
GC
IPv4-STD
-ACL
IPv4-EXT-
ACL
IC
PE
PE