Motorola WS5100 Series Cli Reference Manual page 174

5-10 WS5100 Series Switch CLI Reference Guide
Use an access list command under the global configuration to create an access list. The
switch supports port, router and WLAN ACL's.
• When the access list is applied on an Ethernet port, it becomes a port ACL
• When the access list is applied on a VLAN interface, it becomes a router ACL
• When the access list is applied on a WLAN index, it becomes a WLAN ACL
A MAC access list (to allow arp), is mandatory for both port and WLAN ACL's. For more
information on how to configure a MAC access list, see permit on page 16-9.
Example
The example below creates a standard access list (ACL) to permit any traffic coming to the
interface:
WS5100(config)#access-list 1 permit any
WS5100(config)#
The example below creates a extended IP access list to permit IP traffic between two
networks:
WS5100(config)#access-list 101 permit ip 192.168.1.0/24
192.168.2.0/24
WS5100(config)#
The example below creates a extended access list to permit tcp traffic, between two
networks, with destination port range between 20 and 23:
WS5100(config)#access-list 101 permit tcp 192.168.1.0/24
192.168.2.0/24 range 20 23
WS5100(config)#
The example below denies icmp traffic from any source to any destination:
WS5100(config)#access-list 115 deny icmp any any
WS5100(config)#access-list 115 permit ip any any
WS5100(config)#