Creating Named Ipv4 Address Acls; Table 169. Numbered Mac Acl Example; Table 170. Ip Access-List Commands For Creating Named Ipv4 Acls - Allied Telesis AT-8100L/8 User Manual

Command
awplus> enable
awplus# configure terminal
awplus(config)# access-list 4102
deny any a4:54:86:12:00:00
00:00:00:00:ff:ff
awplus(config)# interface port1.0.19
awplus(config_if)# mac access-group
4102
Creating Named
IPv4 Address
ACLs

Table 170. IP ACCESS-LIST Commands for Creating Named IPv4 ACLs

To Do This Task
Create a Named IPv4 Address ACL and
enter the IP ACL command mode.
Define a Named IPv4 Address ACL that
filters ICMP packets.
Define a Named IPv4 Address ACL that
filters IP packets based on source and
destination IP addresses.
Define a Named IPv4 Address ACL that
filters packets based on source and
destination MAC addresses.
The example in Table 169 configures port 19 to reject packets containing
destination MAC addresses starting with A4:54:86:12:

Table 169. Numbered MAC ACL Example

The Named IPv4 address ACLs are created with the IP ACCESS-LIST
commands. The Named IP ACL with the IP ACCESS-LIST command
automatically places you in the IP ACL mode where you can add the filter
as well as the source and destination IPv4 addresses. Also, you can
assign the ACL to a VLAN.
There are seven commands for creating Named IPv4 ACLs. The IP
ACCESS-LIST command allows you to create a Named IPv4 ACL and
enters the IP ACL command mode. After you enter the IP ACL mode, you
can enter the remaining six commands which provide one command for
each filtering criterion. The commands are listed in Table 170.
AT-8100 Switch Command Line User's Guide
Description
Enter the Privileged Executive mode from
the User Executive mode.
Enter the Global Configuration mode.
Define ACL 4012 to deny any frame with the
destination MAC address that starts with
a4:54:86:12.
Access the Port Interface mode for port 19.
Apply the ACL to the port.
Use this Command
name
IP ACCESS-LIST
icmp
action scr_ipaddress
time-range
dest_ipaddres
ip scr_ipaddress
action
time-range
dest_ipaddress
vid ]
action scr_mac_address
dest_mac_address
vid ]
vid
[vlan
[vlan
time-range
[vlan
]
1535