Brocade Communications Systems RFS6000 - Manual (Page 487)

Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide 485
53-1001931-01
Use case: configuring IP standard ACL
15
mobility Display Mobility parameters
ntp Network time protocol
password-encryption password encryption
port Physical/Aggregate port interface
port-channel Portchannel commands
privilege Show current privilege level
protocol-list List of protocols
radius RADIUS configuration commands
redundancy Display redundancy group parameters
rtls Real Time Locating System commands
role Configure role parameters
running-config Current Operating configuration
securitymgr Securitymgr parameters
service-list List of services
sessions Display current active open connections
smtp-notifications Display the SNMP engine parameters
snmp Display SNMP engine parameters
snmp-server Display SNMP engine parameters
spanning-tree Display spanning tree information
startup-config Contents of startup configuration
static-channel-group static channel group membership
terminal Display terminal configuration parameters
timezone Display timezone
traffic-shape Display traffic shaping
upgrade-status Display last image upgrade status
users Display information about currently logged in users
version Display software & hardware version
virtual-IP IP reduncancy feature
wireless Wireless configuration commands
wlan-acl wlan based acl
RFController(config-std-nacl)#show
Use case: configuring IP standard ACL
IP Standard ACLs contain rules based on Source IP Address. You can create either a Numbered IP
Standard ACL or a Named IP Standard IP Address.
Execute the following CLI commands to configure an IP based standard ACL:
1. To configure numbered IP Standard ACL:
RFController(config)#access-list 2 deny host 1.2.3.4 rule-precedence 10
RFController(config)#access-list 3 deny host 1.2.3.4 rule-precedence 10
RFController(config)#access-list 3 permit any rule-precedence 20
Valid numbers for numbered IP Standard ACLs are from 1-99 and 1300-1999. In the above
CLI example, ACL 3 denies host with IP 1.2.3.4 and allows all other hosts.
2. To configure an IP Standard ACL:
RFController(config)#ip access-list standard ipst2
RFController(config-std-nacl)#permit host 10.1.1.10 rule-precedence 30
RFController(config-std-nacl)#deny any rule-precedence 20