C613-50170-01 Rev B
Command Reference for x510 Series
1495
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED
HARDWARE
ACL: IP
PACKET
ENTRY
)
Mode
IPv4 Hardware ACL Configuration (accessed by running the command
)
Default
On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
<
ip-addr
>
<
reverse-mask
>
Match any destination IP address
within the specified subnet. Specify
the subnet by entering a reverse
mask in dotted decimal format. For
example, entering “192.168.1.1
0.0.0.255” is the same as entering
192.168.1.1/24.
<source-mac>
The source MAC address to match against. You can specify a
single MAC address, a range (through a mask), the address
learned from DHCP snooping, or any:
any
Match against any source MAC
address.
<source-mac>
The source MAC address to match
against, followed by the mask.
Enter the address in the format
<HHHH.HHHH.HHHH>, where each
H
is a hexadecimal number.
Enter the mask in the format
<HHHH.HHHH.HHHH>, where each
H
is a hexadecimal number. For a
mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
dhcpsnooping
Match the source address learned
from the DHCP Snooping binding
database.
<dest-mac>
The destination MAC address to match against. You can specify a
single MAC address, a range (through a mask), or any:
any
Match against any destination MAC
address.
<dest-mac>
The destination MAC address to
match against, followed by the
mask.
Enter the address in the format
<HHHH.HHHH.HHHH>, where each
H
is a hexadecimal number.
Enter the mask in the format
<HHHH.HHHH.HHHH>, where each
H
is a hexadecimal number. For a
mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
vlan
<1-4094>
The VLAN to match against. The ACL will match against the
specified ID in the packet’s VLAN tag.
Parameter
Description