Kontron AT8404 CLI - Manual (Page 206)

Quality of Service (QoS) Commands AT8404
AT8404 CLI Reference Manual Page 3 - 32
3.8.2.1 no ip access-list
This command deletes the IP ACL identified by <name> from the system.
3.8.3 ip access-list rename
This command changes the name of an IP Access Control List (ACL). The <name> parameter is the names of an
existing IP ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters
uniquely identifying the IP access list.
This command fails is an IP ACL by the name <newname> already exists.
3.8.4 {deny | permit} (IP ACL)
This command creates a new rule for the current IP access list. Each rule is appended to the list of configured rules
for the list.
A rule may either deny or permit traffic according to the specified classification fields. At a minimum, either the every
keyword or the protocol, source address, and destination address values must be specified. The source and
destination IP address fields may be specified using the keyword ‘
any ’ to indicate a match on any value in that field.
The remaining command parameters are all optional, but the most frequently used parameters appear in the same
relative order as shown in the command format.
The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches
this rule. The allowed <queue-id> value is 0-(n-1), where n is the number of user configurable queues available
for the hardware platform. The assign-queue parameter is valid only for a permit rule.
Format ip access-list <name>
Mode Global Config
Format no ip access-list <name>
Mode Global Config
Format ip access-list rename <name> <newname>
Mode Global Config
Note: The 'no' form of this command is not supported, since the rules within an IP ACL cannot be deleted
individually. Rather, the entire IP ACL must be deleted and re-specified.
Note: An implicit 'deny all' IP rule always terminates the access list.
Note: The mirror parameter allows the traffic matching this rule to be copied to the specified <slot/
port>, while the redirect parameter allows the traffic matching this rule to be forwarded to the specified
<slot/port>. The assign-queue and redirect parameters are only valid for a permit rule.