Allied Telesis x510-28GPX, Справочник по командам

Страница: 1469 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1469
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST
(
NUMBERED HARDWARE
ACL
FOR
ICMP)
access-list (numbered hardware ACL for
ICMP)
Overview This command creates an access-list for use with hardware classification. The
access-list will match on ICMP packets that have the specified source and
destination IP addresses and, optionally, ICMP type. You can use the value
any
instead of source or destination address if an address does not matter.
Once you have configured the ACL, you can use the access-group or the match
access-group command to apply this ACL to a port, VLAN or QoS class-map.
The optional vlan parameter can be used to match tagged (802.1q) packets.
The no variant of this command removes the previously specified access-list.
Syntax access-list < 3000-3699 > < action > icmp < source-ip > < dest-ip >
[icmp-type < number >] [vlan < 1-4094 >]
no access-list < 3000-3699 >
Parameter Description
< 3000-3699 >
An ID number for this hardware IP access-list.
<action>
The action that the switch will take on matching packets:
deny
Reject packets that match the source
and destination filtering specified
with this command.
permit
Permit packets that match the source
and destination filtering specified
with this command.
copy-to-cpu
Send a copy of matching packets to
the CPU.
copy-to-mirror
Send a copy of matching packets to
the mirror port.
Use the
mirror interface command to
configure the mirror port.
send-to-mirror
Send matching packets to the mirror
port.
Use the
mirror interface command to
configure the mirror port.
send-to-vlan-port
vlan <
vid > port
< port-number >
Send matching packets to the
specified port, tagged with the
specified VLAN. The specified port
must belong to the specified VLAN.
send-to-cpu
Send matching packets to the CPU.
icmp
Match against ICMP packets