Allied Telesis AT-8100L/8 User Manual page 1582

Chapter 99: ACL Commands
This example creates an ACL that causes port 14 to discard all tagged
ingress TCP packets with the VID 27, regardless of their source or
destination TCP port numbers. The list is assigned the ID number 3255:
awplus> enable
awplus# configure terminal
awplus(config)# access-list 3255 deny tcp any any vlan 27
awplus(config)# interface port1.0.14
awplus(config_if)# access-group 3255
This example configures port 21 to forward untagged TCP port 67 to 87
packets only if they are from the 154.11.234.0 network and are going to
the 154.11.235.0 network. This example requires a permit ACL because
the permitted traffic, TCP packets with port numbers in the range of 67 to
87, is a subset of all TCP packets on the port:
awplus> enable
awplus# configure terminal
awplus(config)# access-list 3017 permit tcp 154.11.234.0/24
range 67 87 154.11.235.0/24 range 67 87
awplus(config)# access-list 3005 deny tcp any any range 67
87
awplus(config)# interface port1.0.21
awplus(config_if)# access-group 3017
awplus(config_if)# access-group 3005
1582