FL SWITCH GHS CLI
4-10
PHOENIX CONTACT
8039_en_01
IP A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
This section describes the commands you use to configure IP ACL settings. IP ACLs ensure
that only authorized users have access to specific resources and block any unwarranted
attempts to reach network resources.
The following rules apply to IP ACLs:
•
FL SWITCH GHS Firmware software does not support IP ACL configuration for IP
packet fragments.
•
The maximum number of ACLs you can create is hardware dependent. The limit applies
to all ACLs, regardless of type.
•
The maximum number of rules per IP ACL is hardware dependent.
•
On Broadcom 5630x platforms, if you configure a MAC ACL on an interface, you cannot
configure an IP ACL on the same interface.
•
Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is
in essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in
the bit positions that are used for the network address, and has zeros (0's) for the bit
positions that are not used. In contrast, a wildcard mask has (0’s) in a bit position that
must be checked. A ‘1’ in a bit position of the ACL mask indicates the corresponding bit
can be ignored.
access-list
This command creates an IP Access Control List (ACL) that is identified by the access list
number, which is 1-99 for standard ACLs or 100-199 for extended ACLs
.
Table 10
describes the parameters for the
access-list
command.
IP Standard ACL:
Destination MAC
Address
The destination MAC address for this rule.
Ethertype
The Ethertype keyword or custom value for this rule.
VLAN ID
The VLAN identifier value or range for this rule.
COS
The COS (802.1p) value for this rule.
Log
Displays when you enable logging for the rule.
Assign Queue
The queue identifier to which packets matching this rule are assigned.
Mirror Interface
On Broadcom 5650x platforms, the unit/slot/port to which packets matching this rule are copied.
Redirect Interface
On this device, the slot/port to which packets matching this rule are forwarded.
Term
Definition
Format
access-list
<1-99> {deny | permit} {every | <srcip> <srcmask>} [log] [assign-
queue <queue-id>] [{mirror | redirect} <unit/slot/port>]
RSPSupply - 1-888-532-2706 - www.RSPSupply.com
http://www.RSPSupply.com/p-14161-Phoenix-Contact-2700271-FL-SWITCH-GHS-4G/12-Modular-Ethernet-Switch.aspx