Access Control List Configuration
171
name
The name of an access control list profile that has already been created using the
profile acl command. This argument must be omitted in the no form
in
Specifies that the access control list profile applies to incoming packets on this
interface.
out
Specifies that the access control list applies to outgoing packets on this interface.
The
no
form of the
use
command is used to unbind an access control list profile from an interface.
When using this form the name of an access control list profile, represented by the
name
argument
above, is not required.
Procedure
To unbind an access control list profile to incoming packets on an IP interface
Mode
Interface
Command Purpose
Step 1
node
(if-ip)[
if-name
]#no use profile acl in
Unbinds access control list profile
for incoming packets on IP
interface
if-fname
Where the syntax is:
Keyword
Meaning
if-name
The name of the IP interface to which an access control list profile gets bound
in
Specifies that the access control list profile applies to incoming packets on this
interface.
out
Specifies that the access control list applies to outgoing packets on this interface.
Thus for each IP interface only one incoming and outgoing access control list can be active at the
same time.
Example: Bind and Unbind an Access Control List Entries to an IP Interface
Bind an access control list profile to incoming packets on the interface
wan
in the IP router context.
SN(cfg)#
context ip router
SN(cfg-ip)[router]#
interface wan
SN(cfg-if)[wan]#
use profile acl WanRx in
Unbind an access control list profile from an interface.
SN(cfg)#
context ip router
SN(cfg-ip)[router]#
interface wan
SN(cfg-if)[wan]#
no use profile acl in
Note: When unbinding an access control list profile the
name
argument is not required, since only
one incoming and outgoing access control list can be active at the same time on a certain IP interface.
Software Configuration Guide, Revision 1.03
Summary of Contents for SmartWare R2.00
Page 2: ......