15 access-list ace update – Interlogix NS3702-24P-4S Command Line Guide User Manual

Page 53

Advertising
background image

-53-

frametype

Frame type

ingress

Ingress

logging

Logging frame information. Note: The logging feature only

works when the packet length is less than 1518 (without

VLAN

tags) and the System Log memory size and logging rate

are limited.

next

Insert the current ACE before the next ACE ID

policy

Policy

rate-limiter

Rate limiter

redirect

Redirect frame to specific port

shutdown

Shutdown incoming port. The shutdown feature only works

when the packet length is less than 1518 (without VLAN

tags).

tag-priority

Tag priority

vid

VID field

Default:

N/A

Usage Guide:

To create and set up a profile for the access list.

Example:

To set a Profile 1 up (action: permit, dmac-type: unicast, frametype: ipv4-icmp, ingress: any, logging: disable, policy:

1, rate-limiter: 1, tag-priority: 1. vid: 1

).

Switch# configure terminal
Switch (con fig)# access-list ace 1 action permit dmac-type unicast frametype

ipv4-icmp ingress any logging disable policy 1 rate-limiter 1 tag-priority 1 vid 1

4.2.15 access-list ace update

Command:

access-list ace update <AceId : 1-512> action {deny, permit} | dmac-type {any,

broadcast, multicast, unicast} | frametype {any, arp, etype, ipv4, ipv4-icmp, ipv4-tcp,

ipv4-udp, ipv6, ipv6-icmp, ipv6-tcp, ipv6-udp} | ingress {any, interface

10GigabitEthernet | GigabitEthernet <PORT_ID>} | logging {disable, next, policy,

rate-limiter, shutdown, tag-priority, vid} | next {<AceId : 1-512>, last}| policy

<PolicyId : 0-255> | rate-limiter {<RateLimiterId : 1-16>, disable} | redirect {disable,

interface 10GigabitEthernet | GigabitEthernet <PORT_ID>} | tag-priority {0-1, 0-3, 2-3,

Advertising