C613-50170-01 Rev B
Command Reference for x510 Series
1620
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
Q
O
S C
OMMANDS
MATCH
ACCESS
-
GROUP
match access-group
Overview
Use this command to apply an ACL to a class-map or VLAN.
Use the
no
variant of this command to remove the match.
Syntax
match access-group {<
hw-IP-ACL
>|<
hw-MAC-ACL
>|<
hw-named-ACL
>}
no match access-group
{<
hw-IP-ACL
>|<
hw-MAC-ACL
>|<
hw-named-ACL
>}
Mode
Class Map or VLAN Access-Map
Usage
First create an access-list that applies the appropriate action to matching packets.
Then use the
match access-group
command to apply this access-list as desired.
Note that this command will apply the access-list matching only to
incoming
data
packets.
Examples
To configure a class-map named “cmap1”, which matches traffic against access-list
3001, which allows IP traffic from any source to any destination, use the
commands:
awplus#
configure terminal
awplus(config)#
access-list 3001 permit ip any any
awplus(config)#
class-map cmap1
awplus(config-cmap)#
match access-group 3001
To configure a class-map named “cmap2”, which matches traffic against access-list
4001, which allows MAC traffic from any source to any destination, use the
commands:
awplus#
configure terminal
awplus(config)#
access-list 4001 permit any any
awplus(config)#
class-map cmap2
awplus(config-cmap)#
match access-group 4001
Parameter
Description
<
hw-IP-ACL
>
Specify a hardware IP ACL number in the range <3000-3699>.
<
hw-MAC-ACL
>
Specify a hardware MAC ACL number in the range <4000-4699>.
<
hw-named-ACL
>
Specify a hardware named ACL (IP, IPv6 or MAC address entries).
