Alied Telesis GS970M/10, Command Reference Manual

Page: 856 / 1890

C613-50163-01 Rev C Command Reference for GS970M Series 856
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST
(
NUMBERED HARDWARE
ACL
FOR
IP
PACKETS
)
access-list (numbered hardware ACL for IP
packets)
Overview This command creates an access-list for use with hardware classification. The
access-list will match on packets that have the specified source and destination IP
addresses. You can use the value
any instead of source or destination address if an
address does not matter.
Once you have configured the ACL, you can use the access-group or the match
access-group command to apply this ACL to a port, VLAN or QoS class-map.
The optional vlan parameter can be used to match tagged (802.1q) packets.
The no variant of this command removes the previously specified IP hardware
access-list.
Syntax
access-list < 3000-3699 > < action > ip < source-ip > < dest-ip > [vlan
< 1-4094 >]
no access-list < 3000-3699 >
Table 27-2: IP and ICMP parameters in access-list (hardware IP numbered)
Parameter Description
< 3000-3699 >
An ID number for this hardware IP access-list.
<action>
The action that the switch will take on matching packets:
deny
Reject packets that match the
source and destination filtering
specified with this command.
permit
Permit packets that match the
source and destination filtering
specified with this command.
copy-to-cpu
Send a copy of matching packets to
the CPU.
copy-to-mirror
Send a copy of matching packets to
the mirror port.
Use the
mirror interface command
to configure the mirror port.
send-to-mirror
Send matching packets to the mirror
port.
Use the
mirror interface command
to configure the mirror port.
send-to-cpu
Send matching packets to the CPU.
ip
Match against IP packets
<source-ip>
The source addresses to match against. You can specify a single
host, a subnet, or all source addresses. The following are the valid
formats for specifying the source: