Configuring Expert Extended Access List; Expert Extended Access List Configuration Guide; Configuring Expert Extended Access Lists - D-Link xStack DGS-3610 Series Configuration Manual

Chapter 44 Access Control List Configuration
44.4 Configuring Expert Extended
Access List
To configure expert extended access lists on a device, you must specify unique names or
numbers for the access lists of a protocol to uniquely identifying each access list inside the
protocol.The table below lists the number range of the Expert access list.
Protocol
Expert extended access list
44.4.1 Expert Extended Access List
Configuration Guide
When you create an expert access list, defined rules will be applied to all packets on a
device. The device decides to forward or block a packet by judging whether the packet
matches the rules.
The typical rules defined in expert access lists are as follows:
All information in basic access lists and MAC extended access lists
VLAN ID
Expert extended access lists (2700 – 2899) are the syntheses of basic access lists and MAC
extended access lists and can filter VLAN IDs.
A single expert access list can use multiple separate access list statements to define multiple
rules. Where, all statements use a same number or name to bind these statements to a
same access list.
44.4.2 Configuring Expert Extended Access
Lists
The configuration of an expert access list includes the following steps:
1. Define an expert access list
2. Apply the access list to a specific interface (particular application case)
There are two methods to configure an expert access list.
Method 1: Run the following command in the global configuration mode:
44-12
DGS-3610 Series Configuration Guide
Number Range
2700-2899