768
Usage Guide:
When the user assign specific
<num>
for the first time, ACL of the serial
number is created, then the lists are added into this ACL.
Examples:
Permit the passage of packets with source MAC address 00-00-XX-XX-00-01,
and deny passage of packets with source MAC address 00-00-00-XX-00-ab.
Switch(Config)# access-list 700 permit
00-00-00-00-00-01 00-00-FF-FF-00-01
Switch(Config)#
access-list 700 deny
00-00-00-00-00-ab 00-00-00-FF-00-ab
19.2.2.8 clear access-group statistic
Command: clear access-group statistic [ethernet<interface-name>]
Functions:
Empty packet statistics information of assigned interfaces
Parameters:<interface-name>:
Interface name
Command Mode:
Admin mode
Default:
None
Examples:
Empty packet statistics information of interface E1/1
Switch#clear access-group statistic
19.2.2.9 firewall
Command: firewall { enable | disable}
Functions:
Enable or disable firewall
Parameters: enable
means to enable of firewall;
disable
means to disable firewall.
Default:
It is no use if default is firewall
Command Mode:
Global mode
Usage Guide:
Whether enabling or disabling firewall, access rules can be configured.
But only when the firewall is enabled, the rules can be used in specific orientations of
specific ports. When disabling the firewall, all ACL tied to ports will be deleted.
Examples:
Enable firewall
Switch(Config)#firewall enable
19.2.2.10 firewall default
Command: firewall default {permit | deny}
Functions:
Configure default actions of firewall
Parameters:
permit
means to permit data packets to pass;
deny
means to deny data
packets to pass
Command Mode:
Global mode
Default:
Default action is permit.
Usage Guide:
This command only influences IP packets from the port entrance, and all
packets can pass the switch in other situations.
Examples:
Configure firewall default action as permitting packets to pass.
