configure access-list add
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
833
configure access-list add
configure access-list add <dynamic_rule> [after <rule> | before <rule> |
first | last][any | ports <portlist> | vlan <vlanname>] {ingress | egress}
Description
Configures a dynamic ACL rule to the specified interface.
Syntax Description
Default
The default direction is ingress.
Usage Guidelines
The dynamic rule must first be created before it can be applied to an interface. Use the following
command to create a dynamic rule:
create access-list <dynamic-rule> <conditions> <actions>
When a dynamic ACL rule is applied to an interface, you will specify its precedence among any
previously applied dynamic ACLs. All dynamic ACLs have a higher precedence than any ACLs applied
through ACL policy files.
Specifying the keyword
any
applies the ACL to all the ports, and is referred to as the wildcard ACL.
This ACL is evaluated for ports without a specific ACL applied to it, and is also applied to packets that
do not match the ACL applied to the interface.
dynamic_rule
Specifies a dynamic ACL rule.
after <rule>
Add the new dynamic rule after an existing dynamic rule.
before <rule>
Add the new dynamic rule before an existing dynamic rule.
first
Add the new dynamic rule before all existing dynamic rules.
last
Add the new dynamic rule after all existing dynamic rules.
any
Specifies that this ACL is applied to all interfaces as the lowest precedence
dynamic ACL.
portlist
Specifies the ports on which this ACL is applied.
vlanname
Specifies the VLAN on which this ACL is applied.
ingress
Apply the ACL to packets entering the switch on this interface.
egress
Apply the ACL to packets leaving the switch from this interface (BlackDiamond
10808 and BlackDiamond 12804 only).
