Allied Telesis AT-x510-28GPX, Command Reference Manual

Page: 1403 / 2601

C613-50102-01 REV C Command Reference for x510 Series 1403
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
ACCESS
-
LIST HARDWARE
ICMP
FILTER
)
An ACL can be configured with multiple ACL filters using sequence numbers. If the
sequence number is omitted, the next available multiple of 10 will be used as the
sequence number for the new filter. A new ACL filter can be inserted into the
middle of an existing list by specifying the appropriate sequence number.
NOTE
: You must reach the prompt awplus(config-ip-hw-acl)# by running the
access-list hardware (named) command, and entering an appropriate access-list
name.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To add an access-list filter entry with a sequence number of
100
to the access-list
named
my-list
that will permit ICMP packets with a source address of
192.168.1.0/24
, any destination address and an icmp type of
5
, use the
commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# 100 permit icmp 192.168.1.0/24 any
icmp-type 5
To remove an access-list filter entry with a sequence number of
100
in the
access-list named
my-list
, use the commands:
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# no 100
Related
Commands
access-list hardware (named)
show running-config
show access-list (IPv4 Hardware ACLs)