NetApp CN1610, Cli Command Reference

Page: 671 / 708

668 IP Access Control List Commands
The following shows an example of the command.
(CN1610) (Config)#ip access-list ip1
(CN1610) (Config-ipv4-acl)#permit icmp any any rate-limit 32 16
(CN1610) (Config-ipv4-acl)#exit
ip access-group
This command either attaches a specific IP Access Control List (ACL) identified
by
accesslistnumber
or
name
to an interface, range of interfaces, or all
interfaces; or associates it with a VLAN ID in a given direction. The parameter
name
is the name of the Access Control List.
An optional sequence number may be specified to indicate the order of this IP
access list relative to other IP access lists already assigned to this interface and
direction. A lower number indicates higher precedence order. If a sequence
time-range time-
range-name
Allows imposing a time limitation on the ACL rule
as defined by the parameter time-range-name. If a
time range with the specified name does not exist
and the ACL containing this ACL rule is applied to
an interface or bound to a VLAN, the ACL rule is
applied immediately. If a time range with specified
name exists and the ACL containing this ACL rule is
applied to an interface or bound to a VLAN, the
ACL rule is applied when the time-range with
specified name becomes active. The ACL rule is
removed when the time-range with specified name
becomes inactive.
assign-queue queue-id Specifies the assign-queue, which is the queue
identifier to which packets matching this rule are
assigned.
{mirror | redirect}
unit/slot/ port
Specifies the mirror or redirect interface which is the
unit/slot/port to which packets matching this rule are
copied or forwarded, respectively.
rate-limit rate burst-
size
Specifies the allowed rate of traffic as per the
configured rate in kbps, and burst-size in kbytes.
Parameter Description