200
C o n f i g u r i n g S w i t c h I n f o r m a t i o n
www
.dell.com | support.dell.com
Assigning IP-based ACEs to ACLs Using the CLI Commands
The following table summarizes the equivalent CLI commands for assigning IP-based
ACEs to ACLs as displayed in the
Add ACE to IP Based ACL
page.
The following is an example of the CLI commands:
Permit 00:00:bo:11:11:11 0:0:0:0:0:0 any VLAN 4
deny 00:00:bo:11:11:11 0:0:0:0:0:0 any VLAN 4
Defining MAC-Based ACLs
The
Add ACE to MAC Based ACL
page allows network administrators to define MAC-
based
Access Control Entry
(ACE) and
Access Control Lists
(ACLs). ACEs act as filters to
match packets to forwarding criteria. To open the
Add ACE to MAC Based ACL
:
•
Select
Switch > Network Security > MAC Based ACL
. The
Add ACE to MAC
Based ACL
page opens.
CLI Command
Description
ip access-list
name
Enters to IP-Access list
configuration mode.
permit {any
|
protocol
}
{any |
{
source source-wildcard
}}
{any
| {
destination destination-
wildcard
}}
[dscp
dscp number
| ip-
precedence
ip-precedence
]
Allows
traffic if the conditions
defined in the permit statement
are matched.
deny [disable-port] {any|
protocol
}
{any | {
source source-
wildcard
}}
{any | {
destination
destination-wildcard
}}
[dscp
dscp number
| ip-precedence
ip-
precedence
]
Denies traffic if the conditions
defined in the deny statement are
matched.