DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
25
3-9 expert access-list
This command is used to create or modify an extended expert ACL. This command will enter into the extended expert
access-list configuration mode. Use the no command to remove an extended expert access-list.
expert access-list extended {[
id
|
name
]}
no expert access-list extended {
id
|
name
}
Parameters
Example
This example shows how to use the extended MAC ACL. The purpose is to deny a
host, with the MAC address of 0013.0049.8272, to send Ethernet frames of the type
‘apply’.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#mac access-list extended 6001
DXS-3600-32S(config-mac-nacl)#25 deny host 0013.0049.8272 any aarp
DXS-3600-32S(config-mac-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 ext_ipv6
10 permit ip any any
Extended MAC access list 6001 ext-mac-6001
25 deny host 00-13-00-49-82-72 any aarp
DXS-3600-32S#
id
Specifies the ID number of extended expert ACL. This number must be between
8000 and 9999.
name
Specifies the name of the extended expert ACL to be configured. The name can be
up to 32 characters long.
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
The name must be unique among all (including MAC, IP, IPv6 or Expert) access-lists
and the first character of name must be a letter.
When creating an ACL through the assignment of a name, an ID will be assigned
automatically. The ID assign rule states to start from the maximum ID of 9999 and
decrease 1 for every new ACL created.
When creating an ACL through the assignment of an ID, a name will be assigned
automatically. The name assign rule is ‘ext-expert’ + “-” + ID. If this name conflicts
with the name of an existing ACL, then it will be renamed based on the following rule:
‘ext-expert’ + “-” + ID +”alt”
Example
This example shows how to create an extended expert ACL.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#expert access-list extended exp_acl
DXS-3600-32S(config-exp-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 ext_ipv6
10 permit ip any any
Extended MAC access list 6001 ext-mac-6001
25 deny host 00-13-00-49-82-72 any aarp
Extended EXPERT access list 9999 exp_acl
DXS-3600-32S#
Содержание DXS-3600-16S
Страница 1: ...CLI Reference Guide Product Model DXS 3600 Series Layer 2 3 Managed 10GbE Switch Release 1 10 ...
Страница 232: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 224 ...
Страница 301: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 293 ...
Страница 349: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 341 ...
Страница 494: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 486 ...
Страница 564: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 556 ...
Страница 649: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 641 ...