Fujitsu Siemens Computers PRIMERGY BX, Описание

Страница: 528 / 674

ACL Command Command Reference
Lan Switch and Router Blade
528
This command attaches a specific MAC Access Control List (ACL) identified by <name> to an
interface in a given direction. The <name> parameter must be the name of an exsiting MAC
ACL. An optional sequence number may be specified to indicate the order of this access list
relative to other access lists already assigned to this interface and direction. A lower number
indicates higher precedence order. If a sequence number is already in use for this interface
and direction, the specified access list replaces the currently attached access list using that
sequence number. If the sequence number is not specified for this command, a sequence
number that is one greater than the highest sequence number currently in use for this interface
and direction will be used. This command specified in 'Interface Config' mode only affects a
single interface, whereas the 'Global Config' mode setting is applied to all interfaces. The
'Interface Config' mode command is only available on platforms that support independent
per-port class of service queue configuration.
Syntax
mac access-group <name> in [<1-4294967295>]
no mac access-group <name> in
<no> -
This command removes a MAC ACL identified by <name> from the interface in a
given direction.
Default Setting
None
Command Mode
Global Config, Interface Config
7.16.2.5 access-list
This command creates an Access Control List (ACL) that is identified by the parameter.
Syntax
access-list {( <1-99> {deny | permit} <srcip> <srcmask>)
| ( {<100-199> {deny | permit} {evry | {{icmp | igmp | ip | tcp | udp | <number>} <srcip>
<srcmask> [{eq {<portkey> | <portvalue>}}] <dstip> <dstmask> [{eq {<portkey> |
<portvalue>}}] [precedence <precedence>] [tos <tos> <tosmask>] [dscp <dscp>]}})}
<accesslistnumber>.
The ACL number is an integer from 1 to 199. The range 1 to 99 is for
the normal ACL List and 100 to 199 is for the extended ACL List.
permit or deny
.
The ACL rule is created with two options. The protocol to filter for an ACL rule
is specified by giving the protocol to be used like
icmp ,igmp ,ip ,tcp, udp.
The command