create access-list
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
837
create access-list
create access-list <dynamic-rule> <conditions> <actions>
Description
Creates a dynamic ACL
Syntax Description
Default
N/A.
Usage Guidelines
This command creates a dynamic ACL rule. Use the
configure access-list add
command to apply
the ACL to an interface.
The
conditions
parameter is a quoted string of match conditions, and the
actions
parameter is a
quoted string of actions. Multiple match conditions or actions are separated by semi-colons. A complete
listing of the match conditions and actions is in the ExtremeWare XOS Concepts Guide, in
Chapter
14, “Access Lists (ACLs).”
Dynamic ACL rule names must be unique, but can be the same as used in a policy-file based ACL. Any
dynamic rule counter names must be unique.
Example
The following command creates a dynamic ACL that drops all ICMP echo-request packets on the
interface:
create access-list icmp-echo “protocol icmp;icmp-type echo-request” “deny”
The created dynamic ACL will take effect after it has been configured on the interface. The previous
example creates a dynamic ACL named
icmp-echo
that is equivalent to the following ACL policy file
entry:
entry icmp-echo {
if {
protocol icmp;
icmp-type echo-request;
} then {
deny;
}
}
dynamic-rule
Specifies the dynamic ACL name. The name can be from 1-32 characters long.
conditions
Specifies the match conditions for the dynamic ACL.
actions
Specifies the actions for the dynamic ACLs.
