Create acl, Syntax, Parameters – Allied Telesis AT-S63 User Manual

Page 220: Description

Advertising
background image

Chapter 16: ACL Commands

220

Section I: Basic Features

CREATE ACL

Syntax

create acl=

value

[description=”

string

”]

[action=deny|permit] classifierlist=

value

[portlist=

ports

]

Parameters

acl

Specifies an ID number for the ACL. The number can be
from 0 to 255. Each ACL must have a unique ID number.

description

Specifies a description for the ACL. A description can be up
to 15 alphanumeric characters. Spaces are allowed. If the
description contains spaces, it must be enclosed in double
quotes. Otherwise, the quotes are optional.

action

Specifies the action to be taken by the port when a ingress
packet matches a classifier attached to the ACL. Options
are:

permit

The port accepts the packet.

deny

The port discards the packet, provided that the packet does
not match the classifier of a permit ACL assigned to the
same port. This is the default action.

classifierlist

Specifies the ID numbers of the classifiers to be assigned
to the ACL. When entering multiple ID numbers, separate
the numbers with a comma (e.g., 4,6,7). The classifiers
must already exist on the switch. The order in which you
specify the classifiers is not important. An ACL must have
at least one classifier.

portlist

Specifies the port where this ACL is to be assigned. You
can assign an ACL to more than one port. When entering
multiple ports, the ports can be listed individually (e.g.,
2,5,7), as a range (e.g., 8-12) or both (e.g., 1-4,6,8).

Description

This command creates an ACL. An ACL is used to filter ingress packets
on a port.

Advertising