D-Link DWS-4000 Series, Cli Command Reference

Page: 408 / 566

D-Link Unified Switch CLI Command Reference
400
© 2009 D-Link Corporation. All Rights Reserved
Example:
The following shows example CLI display output for the command.
(DWS-4026) #show mac access-lists m1
ACL Name: m1
Inbound Interface(s): 0/8
Rule Number: 1
Action......................................... deny
Match All...................................... TRUE
Mirror Interface............................... 0/2
IP A
CCESS
C
ONTROL
L
IST
C
OMMANDS
This section describes the commands you use to configure IP Access Control List (ACL) settings. IP ACLs ensure that only
authorized users have access to specific resources and block any unwarranted attempts to reach network resources.
The following rules apply to IP ACLs:
• Unified Switch software does not support IP ACL configuration for IP packet fragments.
• The maximum number of ACLs you can create is 100. The limit applies to all ACLs, regardless of type.
• The maximum number of rules per IP ACL is 12.
• If you configure a MAC ACL on an interface, you cannot configure an IP ACL on the same interface.
• Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in essence the inverse of a
subnet mask. With a subnet mask, the mask has ones (1's) in the bit positions that are used for the network address,
and has zeros (0's) for the bit positions that are not used. In contrast, a wildcard mask has (0’s) in a bit position that
must be checked. A
1 in a bit position of the ACL mask indicates the corresponding bit can be ignored.
access-list
This command creates an IP Access Control List (ACL) that is identified by the access list number, which is 1-99 for standard
ACLs or 100-199 for extended ACLs
.
Table 10 describes the parameters for the
access-list
command.
Term Definition
Rule Number The ordered rule number identifier defined within the MAC ACL.
Action The action associated with each rule. The possible values are Permit or Deny.
Source MAC
Address The source MAC address for this rule.
Destination MAC
Address The destination MAC address for this rule.
Ethertype The Ethertype keyword or custom value for this rule.
VLAN ID The VLAN identifier value or range for this rule.
COS The COS (802.1p) value for this rule.
Log Displays when you enable logging for the rule.
Assign Queue The queue identifier to which packets matching this rule are assigned.
Mirror Interface The slot/port to which packets matching this rule are copied.