Access-list ip – LevelOne FGL-2870 User Manual

Page 566

Advertising
background image

Command Line Interface

4-200

4

• When using mixed rule mode, either standard or extended rules can be used.

However, the rules used in the same ACL must either be all standard or all
extended rules. If standard rules are used for all ACLs, the maximum number
of rules permitted by the system can be used.

• When using mixed rule mode, the following functions are not supported:

DHCP Snooping, IP Source Guard, Web Authentication, Switch Cluster,
UPnP, MAC-Based VLANs, and MVR.

• If the rule mode is changed from the default setting, the current status can be

displayed with the show running-config (page 4-30) and show
startup-config
(page 4-29
) commands.

Example

access-list ip

This command adds an IP access list and enters configuration mode for standard or
extended IPv4 ACLs. Use the no form to remove the specified ACL.

Syntax

[no] access-list ip {standard | extended} acl-name

standard – Specifies an ACL that filters packets based on the source IP

address.

extended – Specifies an ACL that filters packets based on the source or

destination IP address, and other more specific criteria.

acl-name – Name of the ACL. (Maximum length: 16 characters, no spaces)

Default Setting

None

Command Mode

Global Configuration

Command Usage

• When you create a new ACL or enter configuration mode for an existing ACL,

use the permit or deny command to add new rules to the bottom of the list.
To create an ACL, you must add at least one rule to the list.

• To remove a rule, use the no permit or no deny command followed by the

exact text of a previously configured rule.

• An ACL can contain up to 100 rules.

Example

Console(config)#access-list rule-mode extended
Warning: This will take effect only after rebooting the switch.
Console(config)#

Console(config)#access-list ip standard david
Console(config-std-acl)#

Advertising