Dell BigIron RX Series, Руководство по настройке

Страница: 635 / 1458

BigIron RX Series Configuration Guide 559
53-1002253-01
Modifying ACLs
21
NOTE
An ACL remark is attached to each individual filter only, not to the entire ACL.
Complete the syntax by specifying any options you want for the ACL entry. Options you can use to
configure standard or extended numbered ACLs are discussed in
“Configuring standard or
extended named ACLs” on page 539.
Numbered ACLs: deleting a comment
To delete a remark from a numbered ACL, re-enter the remark command without any remark. For
example if the remarks "Permit all users" has been defined for ACL 99, remove the remark by
entering the following command.
BigIron RX(config)# access-list 99 remark
Syntax: [no] access-list <number> remark
Note that the actual remark is blank.
Named ACLs: adding a comment to a new ACL
You can add a comment to an ACL by doing the following.
1. Use the show access-list command to display the contents of the ACL. For example, you may
have an ACL named "entry" and a show access-list command shows that it has only one entry.
BigIron RX(config)# show access-list name entry
Standard IP access-list 99
deny host 1.2.4.5
2. Add a new entry with a remark to this named ACL by entering commands such as the following.
BigIron RX(config)#ip access-list standard entry
BigIron RX(config-std-nacl)#remark Deny traffic from Marketing
BigIron RX(config-std-nacl)# deny 5.6.7.8
3. Enter a show access-list command to display the new ACL entry with its remark.
BigIron RX(config)#show access-list name entry
Standard IP access-list entry
deny host 1.2.4.5
permit host 5.6.7.8
ACL remark: Deny traffic from Marketing
Syntax: ip access-list [extended | logging-age | standard] <acl-name> <acl number> [no] remark
<string> deny <options> | permit <options>
•
extended | logging-age | standard parameter indicates the ACL type and logging timer setting
in minutes. For more information about the logging-age parameter, refer to
“ACL logging” on
page 555.
•
<acl-name> - ACL name. You can specify a string of up to 255 alphanumeric characters. You
can use blanks in the ACL name if you enclose the name in quotation marks (for example, “ACL
for Net1”).
•
<acl-num> - ACL number (for example, super ACLs). Specify a number from 1 – 99 for standard
ACLs, 100 – 199 for extended ACLs, and 500 – 599 for super ACLs.