Managing acl comment text, Adding a comment to an entry in a numbered acl – Brocade TurboIron 24X Series Configuration Guide User Manual

Page 950

Advertising
background image

916

Brocade TurboIron 24X Series Configuration Guide

53-1003053-01

Managing ACL comment text

Managing ACL comment text

ACL comment text describes entries in an ACL. The comment text appears in the output of show
commands that display ACL information.

This section describes how to add ACL comments.

Adding a comment to an entry in a numbered ACL

To add comments to entries in a numbered ACL, enter commands such as the following.

For example, using the same example configuration above, you could instead enter the following
commands.

Syntax: [no] access-list <ACL-num> remark <comment-text>

or

Syntax: [no] ip access-list standard | extended <ACL-num>

Syntax: remark <comment-text>

For <ACL-num>, enter the number of the ACL.

The <comment-text> can be up to 128 characters in length. The comment must be entered
separately from the actual ACL entry; that is, you cannot enter the ACL entry and the ACL comment
with the same access-list or ip access-list command. Also, in order for the remark to be displayed
correctly in the output of show commands, the comment must be entered immediately before the
ACL entry it describes. Note that an ACL comment is tied to the ACL entry immediately following the
comment. Therefore, if the ACL entry is removed, the ACL comment is also removed.

The standard | extended parameter indicates the ACL type.

TurboIron(config)#access-list 100 remark The following line permits TCP packets

TurboIron(config)#access-list 100 permit tcp 192.168.4.40/24 2.2.2.2/24

TurboIron(config)#access-list 100 remark The following permits UDP packets

TurboIron(config)#access-list 100 permit udp 192.168.2.52/24 2.2.2.2/24

TurboIron(config)#access-list 100 deny ip any any

TurboIron(config)#ip access-list extended 100

TurboIron(config-ext-nACL)#remark The following line permits TCP packets

TurboIron(config-ext-nACL)#permit tcp 192.168.4.40/24 2.2.2.2/24

TurboIron(config-ext-nACL)#remark The following permits UDP packets

TurboIron(config-ext-nACL)#permit udp 192.168.2.52/24 2.2.2.2/24

TurboIron(config-ext-nACL)#deny ip any any

Advertising