MES53xx, MES33xx, MES23xx Ethernet Switch Series
174
Table 5.200. ACL creation and modification commands
Command
Value/Default value
Action
ip access-list
access_list
{deny | permit} {any
|
ip_address
[
ip_address_mask
]
}
access_list: (0..32)
characters
Createthe standard ACL.
-
deny
– deny passing the packets with the
specified parameters;
-
permit
– permit passing the packet with the
specified parameters.
no ip access-list
access_list
Delete the ACL standard list.
ip access-list extended
access_list
Create a new advanced IPv4 ACL and enter its
configuration mode (if the does not exist) or
enter the configuration mode of a previously
created list.
no ip access-list extended
access_list
Remove an extended IPv4 ACL.
ipv6 access-
list
access_list
{deny|permit}{any|
ipv6_address
[
ipv6_address_prefix
]}
Create a new standard ACL for addressing IPv6.
-
deny
– deny passing the packets with the
specified parameters;
-
permit
– permit passing the packets with the
specified parameters.
no ipv6 access-list
access_list
Delete the standard ACL for addressing IPv6.
ipv6 access-list extended
access_list
Create a new advanced IPv6 ACL and enter its
configuration mode (if the list does not exist)
or enter the configuration mode of a previously
created list.
no ipv6 access-list extended
access_list
Remove an extended IPv6 ACL.
mac access-list extended
access_list
Create a new MAC-based ACL and enter its
configuration mode (if the list does not exist)
or the configuration mode of a previously
created list.
no mac access-list extended
access_list
Remove a MAC-based ACL.
time-range
time_name
time_name: (0..32)
characters.
Enter the time-range configuration mode and
define time periods for the access list.
-
time_name
- the name of the time-range
settings profile.
no time-range
time_name
Remove an existing time-range configuration.
To activate an ACL list, associate it with an interface, which may be either an Ethernet interface or a
port group.
Ethernet or port group interface configuration mode commands.
Command line prompt in the Ethernet or port group interface configuration mode is as follows:
console(config-if)#
Table 5.201. The command that assigns an ACL to an interface.
Command
Value/Default value
Action
service-acl input
access_list
access_list: (0..32)
characters.
This command specifies binds the specified list to an interface
in the settings of that physical interface.
no service-acl input
Remove a list from the interface.
Privileged EXEC mode commands
Command line in the Privileged EXEC mode appears as follows:
console#
Table 5.202. ACL display commands
Command
Value/Default value
Action
show access-lists [
access_list
]
access_list: (0..32)
Display ACLs created on the switch.
