C613-50170-01 Rev B
Command Reference for x510 Series
1483
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST
(
NUMBERED
HARDWARE
ACL
FOR
TCP
OR
UDP)
access-list (numbered hardware ACL for TCP
or UDP)
Overview
This command creates an access-list for use with hardware classification. The
access-list will match on TCP or UDP packets that have the specified source and
destination IP addresses and optionally, port values. You can use the value
any
instead of source or destination IP address if an address does not matter.
Once you have configured the ACL, you can use the
or the
command to apply this ACL to a port, VLAN or QoS class-map.
You can use the optional
vlan
parameter to match tagged (802.1q) packets.
The
no
variant of this command removes the specified IP hardware access-list.
Syntax
access-list <
3000-3699
> <
action
> {tcp|udp}
<source-ip
>
[<
source-ports
>]
<dest-ip>
[<
dest-ports
>] [vlan <
1-4094
>]
no access-list <
3000-3699
>
Parameter
Description
<
3000-3699
>
An ID number for this hardware IP access-list.
<action>
The action that the switch will take on matching packets:
deny
Reject packets that match the
source and destination filtering
specified with this command.
permit
Permit packets that match the
source and destination filtering
specified with this command.
copy-to-cpu
Send a copy of matching packets to
the CPU.
copy-to-mirror
Send a copy of matching packets to
the mirror port.
Use the
command
to configure the mirror port.
send-to-mirror
Send matching packets to the
mirror port.
Use the
command
to configure the mirror port.
send-to-vlan-port
vlan <
vid
> port
<
port-number
>
Send matching packets to the
specified port, tagged with the
specified VLAN. The specified port
must belong to the specified VLAN.
send-to-cpu
Send matching packets to the CPU.
tcp
Match against TCP packets.
udp
Match against UDP packets.
