8. Access Control List (ACL) Egress Command List
129
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure a port-base egress access rule that when the packet go out Switching
Hub which match the specified source IP, DSCP and destination IP field, it will not be
dropped:
To configure a vlan-base egress access rule that when the packet go out Switching
Hub which match the specified source MAC field, it will be dropped:
time_range
(Optional) Specifies the name of the time range entry.
<range_name 32>
Enter the time range value here. This name can be up to 32 characters long.
delete
Specifies to delete a profile or rule.
access_id
Specifies the index of the access list entry. If the auto_assign option is selected, the
access ID is automatically assigned.
<value 1-128>
Enter the access ID used here. This value must be between 1 and 128.
Zxxx0:admin# config egress_access_profile profile_id 2 add access_id auto_assign
ip source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id 1 permit
Command: config egress_access_profile profile_id 2 add access_id auto_assign ip
source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id 1 permit
Success.
Zxxx0:admin#
Zxxx0:admin# config egress_access_profile profile_id 2 add access_id 1 ethernet
source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Command: config egress_access_profile profile_id 2 add access_id 1 ethernet
source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Success.
Zxxx0:admin#
Summary of Contents for ZEQUO 6400
Page 160: ...12 Basic IP Commands 161 ...
Page 189: ...17 Command Logging Command List 190 ...
Page 554: ...49 MAC based Access Control Commands 555 ...
Page 812: ...69 QoS Commands 813 ...
Page 839: ...73 SNMPv1 v2 v3 Commands 840 Only Administrator level users can issue this command ...
Page 962: ...85 Virtual Router Redundancy Protocol VRRP Command List 963 ...
Page 1050: ...91 System Log Lists 1051 ...