Command Guide of WGSW-28040
54
sequence 50 deny any AA:BB:CC:00:00:00/FF:FF:FF:00:00:00 vlan 9 shutdown
4.3.4 ip acl
Command:
ip acl NAME
no ip acl NAME
Parameter:
NAME
Specify the name of IPv4 ACL
Mode:
Global Configuration
Usage Guide:
Use the
ip acl
command to create an IPv4 access list and to enter ip-acl configuration mode. The name of ACL must
be unique that can not have same name with other ACL or QoS policy. Once an ACL is created, an implicit “deny any”
ACE created at the end of the ACL. That is, if there are no matches, the packets are denied. Use the no form of this
command to delete.
Example:
The example shows how to create an IP ACL. You can verify settings by the following show acl command
Switch(config)#
ip acl iptest
Switch(ip-al)#
show acl
IP access list iptest
4.3.5 permit (IP)
Command:
[sequence <1-2147483647>] permit (<0-255>|ipinip|egp|igp|hmp|rdp|ipv6|
ipv6:rout|ipv6:frag|rsvp|ipv6:icmp|ospf|pim|l2tp|ip) (A.B.C.D/A.B.C.D|any) (A.B.C.D/A.B.C.D|any)
[(dscp|precedence) VALUE]]