18. Access Lists
322
Number of access lists that can be created
The number of access lists that can be created is the number of names that can be used as access
list IDs.
Number of specifications that can be set for an interface
The number of specifications that can be set for an interface is the total number of access lists that
can be set for an interface.
Specifications are counted separately for the receiving side and sending side. For example, if an
access list is set for both the receiving side and sending side of the same interface, two lists are
counted regardless of whether the same access list name is specified.
Examples for calculating the number of access lists that can be created and the
number of specifications that can be set for an interface
The following table provides examples for calculating the number of access lists that can be
created and the number of specifications that can be set for an interface.
Table 18-13:
Examples for calculating the number of access lists that can be created and the
number of specifications that can be set for an interface
parameter-option
Parameter option problems
4
2
parameter-problem
All parameter problems
4
Not specified
port-unreachable
Port unreachable
1
4
reassembly-timeout
Reassembly timeout
3
1
renum-command
Router renumbering command
138
0
renum-result
Router renumbering result
138
1
renum-seq-number
Router renumbering sequence number
reset
138
255
router-advertisement
Neighbor discovery router advertisements
134
Not specified
router-renumbering
All router renumbering
138
Not specified
router-solicitation
Neighbor discovery router solicitations
133
Not specified
time-exceeded
All time exceeded
3
Not specified
unreachable
All unreachable
1
Not specified
Sample code
Number of
access lists
created
Number of
specifications
set for the
interface
In this example, access list
AAA
is created and applied to inbound on Ethernet
interface 0/1.
interface gigabitethernet 0/1
ip access-group AAA in
ip access-list extended AAA
10 permit tcp any any
20 deny udp any any
1 list
1 list
Message name
Message
Type
Code
Summary of Contents for AX3630S
Page 16: ......
Page 43: ...15 Chapter 3 Editing and Working with Configurations end quit exit save write show status top...
Page 59: ...4 Login Security and RADIUS or TACACS 31 tacacs server...
Page 63: ...4 Login Security and RADIUS or TACACS 35 aaa authentication login end by reject...
Page 77: ...4 Login Security and RADIUS or TACACS 49 ip access group ipv6 access list...
Page 92: ......
Page 95: ...5 Time Settings and NTP 67 Notes None Related commands set clock show clock show logging...
Page 100: ...5 Time Settings and NTP 72 ntp master ntp authenticate ntp trusted key ntp broadcast client...
Page 125: ...7 Device Management 97 Notes None Related commands None...
Page 164: ......
Page 178: ...10 Link Aggregation 150 channel group max active port...
Page 194: ...12 VLAN 166 Related commands mac based vlan static only...
Page 217: ...12 VLAN 189 Related commands None...
Page 224: ...12 VLAN 196 Related commands vlan mac...
Page 240: ...13 Spanning Tree Protocol 212 spanning tree single mode...
Page 276: ...13 Spanning Tree Protocol 248 Related commands None...
Page 285: ...13 Spanning Tree Protocol 257 Related commands None...
Page 287: ...13 Spanning Tree Protocol 259 spanning tree vlan mode...
Page 288: ......
Page 292: ...14 Ring Protocol 264 Related commands vlan...
Page 318: ......
Page 324: ...15 IGMP Snooping 296 Related commands ip igmp snooping...
Page 326: ......
Page 331: ...16 MLD Snooping 303 Related commands ipv6 mld snooping...
Page 340: ......
Page 389: ...18 Access Lists 361 remark...
Page 391: ...18 Access Lists 363 Related commands ipv6 access list...
Page 400: ...18 Access Lists 372 Related commands mac access list extended...
Page 420: ......
Page 436: ...19 QoS 408 Related commands ip qos flow list...
Page 442: ...19 QoS 414 Related commands ipv6 qos flow list...
Page 449: ...19 QoS 421 Related commands mac qos flow list...
Page 484: ......
Page 509: ...21 IEEE802 1X 481 dot1x multiple authentication...
Page 519: ...21 IEEE802 1X 491 dot1x system auth control dot1x port control...
Page 534: ...21 IEEE802 1X 506 dot1x system auth control dot1x vlan dynamic enable...
Page 547: ...21 IEEE802 1X 519 dot1x vlan enable...
Page 551: ...21 IEEE802 1X 523 Related commands dot1x system auth control dot1x vlan enable...
Page 555: ...21 IEEE802 1X 527 Related commands dot1x system auth control dot1x vlan enable...
Page 560: ......
Page 592: ......
Page 598: ...23 MAC based Authentication 570 mac authentication port...
Page 615: ...24 Authentication VLANs OP VAA 587 fense vlan...
Page 626: ......
Page 638: ...25 DHCP Snooping 610 ip dhcp snooping vlan...
Page 678: ...28 VRRP 650 track interface track ip route vrrp ip vrrp track...
Page 680: ...28 VRRP 652 ip address track interface track ip route vrrp ip vrrp track...
Page 682: ...28 VRRP 654 track ip route vrrp ip vrrp track...
Page 684: ...28 VRRP 656 track interface track ip route vrrp ip vrrp track...
Page 690: ...28 VRRP 662 track ip route vrrp ip vrrp track...
Page 692: ...28 VRRP 664 track interface track ip route vrrp ip vrrp track...
Page 717: ...689 Chapter 31 Storm Control storm control...
Page 739: ...33 CFM 711 ma vlan group...
Page 743: ...33 CFM 715 Related commands domain name ethernet cfm cc enable ma name ma vlan group...
Page 790: ......
Page 793: ...35 Log Data Output Functionality 765 ip domain name ip name server ip domain lookup...
Page 805: ...35 Log Data Output Functionality 777 Related commands logging host...
Page 806: ......
Page 819: ...36 sFlow Statistics 791 Notes None Related commands None...
Page 828: ......
Page 836: ......
Page 837: ...809 PART 14 Port Mirroring Chapter 39 Port Mirroring monitor session...