Intel 480T, Руководство пользователя

Страница: 260 / 367

258
C H A P T E R 1 4 Access Policies
Access List Commands
Table 68 describes the commands used to configure IP access lists.
Table 68: Access List Configuration Commands
Command Description
create access-list <name> ip destination
[<dst_ipaddress>/<dst_mask> | any] source
[<src_ipaddress>/<src_mask> | any]
[permit <qosprofile> | deny] ports
[<portlist> | any] {precedence
<precedence_num>}
Creates a named IP access list. The access list is
applied to all ingress packets. Options include:
•
<name>
— Specifies the access list name.
The access list name can be between 1 and 16
characters.
•
ip
— Specifies an IP access list.
•
destination
— Specifies an IP destination
address and subnet mask. A mask length of
32 indicates a host entry.
•
source
— Specifies an IP source address and
subnet mask.
•
permit
— Specifies the packets that match
the access list description are permitted to be
forward by this switch. An optional QoS
profile can be assigned to the access list, so
that the switch can prioritize packets
accordingly.
•
deny
— Specifies the packets that match the
access list description are filtered (dropped)
by the switch.
•
precedence
— Specifies the access list
precedence number. The range is 1 to 255.