Alaxala AX3630S, Software Manual

Page: 382 / 875

18. Access Lists
354
ip access-list extended
Configures an access list to serve as an IPv4 filter. There are two types of access lists that operate
as IPv4 filters. One type is an IPv4 address filter and the other type is an IPv4 packet filter.
This command sets an IPv4 packet filter.
An IPv4 packet filter filters based on source IPv4 address, destination IPv4 address, VLAN ID,
user priority, ToS field value, port number, TCP flag, ICMP type, and ICMP code.
A maximum of 1024 access lists (for IPv4, IPv6, and MAC) can be created per device. A maximum
of 1024 filter condition entries can be created.
For details about access lists, see
Number of access lists that can be created .
If you specify
permit
for the filter action, you can specify parameters for policy-based routing. If
you use access group commands to apply the target access list to an interface, specify the inbound
side of the VLAN interface. [AX3640S] [OS-L3A]
Syntax
To set information:
ip access-list extended { <access list number> | <access list name> }
To delete information:
no ip access-list extended { <access list number> | <access list name> }
Input mode
(config)
Parameters
{ <access list number> | <access list name> }
Specifies the identifier of the IPv4 packet filter that is to be set.
1.
Default value when this parameter is omitted:
This parameter cannot be omitted.
2. Range of values:
For
<access list number> , specify values from 100 to 199, or from 2000 to 2699 (in
decimal).
For
<access list name> , specify a name that is no more than 31 characters.
For details, see Specifiable values for parameters .
Default behavior
None
Impact on communication
None
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. For <access list number> , you can use 100 to 199 or 2000 to 2699 in the
access-list
command.