Table 101: Access Control List Commands; Table 102: Ipv4 Acl Commands; Acces Control List - Edge-Core ES3528MV2 Management Manual

26
IP 4 ACL
V S
A C
CCESS ONTROL
Access Control Lists (ACL) provide packet filtering for IPv4 frames (based
on address, protocol, Layer 4 protocol port number or TCP control code),
IPv6 frames (based on address, DSCP traffic class, or next header type), or
any frames (based on MAC address or Ethernet type). To filter packets,
first create an access list, add the required rules, and then bind the list to a
specific port. This section describes the Access Control List commands.

Table 101: Access Control List Commands

Command Group Function
IPv4 ACLs Configures ACLs based on IPv4 addresses, TCP/UDP port number,
protocol type, and TCP control code
IPv6 ACLs Configures ACLs based on IPv6 addresses, DSCP traffic class, or
next header type
MAC ACLs Configures ACLs based on hardware addresses, packet format,
and Ethernet type
ARP ACLs Configures ACLs based on ARP messages addresses
ACL Information Displays ACLs and associated rules; shows ACLs assigned to each
port
The commands in this section configure ACLs based on IPv4 addresses,
TCP/UDP port number, protocol type, and TCP control code. To configure
IPv4 ACLs, first create an access list containing the required permit or deny
rules, and then bind the access list to one or more ports.

Table 102: IPv4 ACL Commands

Command Function
access-list ip Creates an IP ACL and enters configuration mode for
standard or extended IPv4 ACLs
permit, deny Filters packets matching a specified source IPv4
address
permit, deny Filters packets meeting the specified criteria, including
source and destination IPv4 address, TCP/UDP port
number, protocol type, and TCP control code
ip access-group Binds an IPv4 ACL to a port
show ip access-group Shows port assignments for IPv4 ACLs
show ip access-list Displays the rules for configured IPv4 ACLs
– 951 –
L
ISTS
Mode
GC
IPv4-STD-ACL
IPv4-EXT-ACL
IC
PE
PE