Dell Brocade DCX, Configuration Manual

Page: 590 / 1436

518 BigIron RX Series Configuration Guide
53-1001810-01
Configuring numbered and named ACLs
21
BigIron RX (config)# interface ethernet 4/3
BigIron RX (config-if-e10000-4/3)# acl-mirror-port ethernet 5/1
Configuring numbered and named ACLs
When you configure ACLs, you can refer to the ACL by a numeric ID or by an alphanumeric name
(except for super ACLs, which must be assigned numeric IDs). The commands to configure
numbered ACLs are different from the commands to configure named ACLs:
•
To identify an ACL by a numeric ID, use 1 – 99 for a standard ACL, 100 – 199 for an extended
ACL, and 500 – 599 for a super ACL. This document refers to these ACLs as
numbered ACLs .
•
To identify an ACL by a name, first specify whether the ACL is standard or extended, then
specify the name. This document refers to these ACLs as
named ACLs . Super ACLs must be
configured with numeric IDs only.
You can configure up to 100 standard named or numbered IP ACLs, 100 extended named or
numbered IP ACLs, and 100 numbered super ACLs. Regardless of how many ACLs you configure,
the device can support a maximum of 1024 ACL entries, associated with the ACLs in any
combination.
Configuring standard numbered ACLs
This section describes how to configure standard numbered ACLs with numeric IDs:
•
For configuration information on named ACLs, refer to “Configuring standard or extended
named ACLs” on page 529.
•
For configuration information on extended ACLs, refer to “Configuring extended numbered
ACLs” on page 520.
Standard ACLs permit or deny packets based on source IP addresses. You can configure up to 99
standard ACLs. There is no limit to the number of ACL entries an ACL can contain, except for the
system-wide limitation. For the number of ACL entries supported on a device, refer to
“ACL IDs and
entries” on page 513.
To configure a standard ACL and apply it to outgoing traffic on port 1/1, enter the following
commands.
BigIron RX (config)# access-list 1 deny host 209.157.22.26 log
BigIron RX (config)# access-list 1 deny 209.157.29.12 log
BigIron RX (config)# access-list 1 deny host IPHost1 log
BigIron RX (config)# access-list 1 permit any
BigIron RX (config)# int eth 1/1
BigIron RX (config-if-e10000-1/1)# ip access-group 1 in
BigIron RX (config)# write memory
The commands in this example configure an ACL to deny packets from three source IP addresses
from being forwarded on port 1/1. The last ACL entry in this ACL permits all packets that are not
explicitly denied by the first three ACL entries.
Standard ACL syntax
Syntax: [no] access-list <num> deny | permit <source-ip> | <hostname> <wildcard> [log]
or