Korenix Technology Co., Ltd.
Industrial
Layer 3 Managed Ethernet Switch
_____________________________________________________________________________
Industrial Layer 3 Managed Ethernet SwitchUser Manual
Page: 582/1246
6.21.2.7
ip access-group
This command attaches a specified access-control list to an interface or associates with a VLAN ID in a
given direction. The parameter <name> is the name of the Access Control List
.
An optional sequence number may be specified to indicate the order of this IP access list relative to
other IP access lists already assigned to this interface and direction. A lower number indicates higher
precedence order. If a sequence number is already in use for this interface and direction, the specified
access list replaces the currently attached IP access list using that sequence number. If the sequence
number is not specified for this command, a sequence number that is one greater than the highest
sequence number currently in use for this interface and direction is used.
This command specified in 'Interface Config' mode only affects a single interface, whereas the 'Global
Config' mode setting is applied to all interfaces. The VLAN keyword is only valid in the 'Global Config'
mode.
Syntax
ip access-group {<1- 199> | <name>} [vlan <vlan-id>] {in|out} [<1-4294967295>]
no ip access-group {<1-199> | <name>} [vlan <vlan-id>] {in|out}
<1- 199>
The identifier of this ACL.
<name>
The name of this ACL.
<vlan-id>
The associated VLAN ID of this ACL.
<1-4294967295>
The sequence number of this ACL.
in|out
- The direction value is either in or out
no
- This command removes a ACL by identifier or name from the interface or vlan in a given
direction.
Default Setting
None
Command Mode
Global Config
Interface Config
