Ip Access-List - NETGEAR ProSafe M7100-24X User Manual

Parameter
[precedence <precedence> |
tos <tos> <tosmask> | dscp
<dscp>]
[log]
rate-limit
[assign-queue <queue-id>]
[{mirror | redirect}
<unit/slot/port>]
no access-list
This command deletes an IP ACL that is identified by the parameter <accesslistnumber>
from the system. The range for <accesslistnumber> 1-99 for standard access lists and
100-199 for extended access lists.
Format
no access-list <accesslistnumber>
Mode
Global Config

ip access-list

This command creates an extended IP Access Control List (ACL) identified by <name>,
consisting of classification fields defined for the IP header of an IPv4 frame. The <name>
parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely
identifying the IP access list.
If an IP ACL by this name already exists, this command enters IPv4-Access_List config mode
to allow updating the existing IP ACL.
Note: The CLI mode changes to IPv4-Access-List Config mode when you
successfully execute this command.
Format
ip access-list <name>
Mode
Global Config
ProSafe Managed Switch
Description
Specifies the TOS for an IP ACL rule depending on a match of
precedence or DSCP values using the parameters dscp,
precedence, tos/tosmask.
Specifies that this rule is to be logged.
The user can specify a simple rate limiter for packets matching an
ACL "permit" rule. The user needs to specify the burst size in kbytes
and allowed rate of traffic in kbps. The conforming traffic is allowed
to transmit, and non-conforming traffic is dropped. This action is
ignored for any "deny" rule, since by definition matching packets are
dropped.
Specifies the assign-queue, which is the queue identifier to which
packets matching this rule are assigned.
Specifies the mirror or redirect interface which is the unit/slot/port to
which packets matching this rule are copied or forwarded,
respectively.
Quality of Service (QoS) Commands
475