Edge-Core ECS4810-12M Layer 2, Руководство по управлению

Страница: 793 / 1236

– 793 –
27
A
CCESS
C
ONTROL
L
ISTS
Access Control Lists (ACL) provide packet filtering for IPv4 frames (based
on address, protocol, Layer 4 protocol port number or TCP control code),
IPv6 frames (based on address, DSCP traffic class, or next header), or any
frames (based on MAC address or Ethernet type). To filter packets, first
create an access list, add the required rules, and then bind the list to a
specific port. This section describes the Access Control List commands.
IP
V
4 ACL
S
The commands in this section configure ACLs based on IPv4 addresses,
TCP/UDP port number, protocol type, and TCP control code. To configure
IPv4 ACLs, first create an access list containing the required permit or deny
rules, and then bind the access list to one or more ports.
Table 90: Access Control List Commands
Command Group Function
IPv4 ACLs Configures ACLs based on IPv4 addresses, TCP/UDP port number,
protocol type, and TCP control code
IPv6 ACLs Configures ACLs based on IPv6 addresses, DSCP traffic class, or
next header type
MAC ACLs Configures ACLs based on hardware addresses, packet format,
and Ethernet type
ARP ACLs Configures ACLs based on ARP messages addresses
ACL Information Displays ACLs and associated rules; shows ACLs assigned to each
port
Table 91: IPv4 ACL Commands
Command Function Mode
access-list ip Creates an IP ACL and enters configuration mode for
standard or extended IPv4 ACLs
GC
permit, deny Filters packets matching a specified source IPv4
address
IPv4-
STD-ACL
permit, deny Filters packets meeting the specified criteria, including
source and destination IPv4 address, TCP/UDP port
number, protocol type, and TCP control code
IPv4-
EXT-ACL
ip access-group Binds an IPv4 ACL to a port IC
show ip access-group Shows port assignments for IPv4 ACLs PE
show ip access-list Displays the rules for configured IPv4 ACLs PE