4.5. Access Control Configuration
Configure the access control in "Global configuration mode."
Class configuration command
Global configuration mode
Class delete command
Global configuration mode
In-Profile configuration command
Global configuration mode
In-Profile delete command
Global configuration mode
Out-Profile configuration command
Global configuration mode
Out-Profile delete command
Global configuration mode
Port list configuration command
Global configuration mode
Port list delete command
Global configuration mode
Policy configuration command
Global configuration mode
Policy enable command
Global configuration mode
Policy disable command
Global configuration mode
Policy delete command
Global configuration mode
Class configuration display command
Privileged mode
accesscontrol classifier <id>
[src-mac <MAC>][dst-mac <MAC>]
[src-net <ip-mask>][dst-net <ip-mask>]
[src-port <layer4-port-list>][dst-port <layer4-port-list>]
[vlan-id <vid>] [dot1p-priority <priority>] [dscp <value>] [protocol
<pro-num>][icmp-type<0-18>]
[TCP-syn-flag{true/false}
no accesscontrol classifier <index>
accesscontrol inprofile <index> {deny | permit { dscp <value>
| precedence <value>| cos <value>}}
no accesscontrol inprofile <index>
accesscontrol outprofile <index> committed-rate <unit> burst-size
<volume> {deny | permit [dscp<value>]}
no accesscontrol outprofile <index>
accesscontrol portlist <port-list-index> <1-2 or 1,2,3 or 1,2,3-5>
no accesscontrol portlist
accesscontrol policy <index> portlist <index> classifier <index>
policy-sequence <value>
[inprofile <index>][outprofile <index>]
accesscontrol policy <index> enable
no accesscontrol policy <index> enable
no accesscontrol policy <index>
show accesscontrol classifier {all | <classifier-number>}
37