System information
Publication date: Feb., 2012
Revision A1
- 23 -
CLIReferenceGuide
Copyright @ 2012 by Amer Networks
switch: Switch ACE keyword, the rule applies to all ports
<port-list> : available value is from switch physic port density, format:
1,3-5
any: Any frame can match this ACE.
arp : Only ARP frames can match this ACE. Notice the ARP frames
won't match the ACE with Ethernet type
etype: Only Ethernet Type frames can match this ACE
icmp : Only ICMP frames can match this ACE. Notice the ICM frames
won't match the ACE with Ethernet type
ipv4: Only IPv4 frames can match this ACE. Notice the IPv4 frames
won't match the ACE with Ethernet type
tcp : Only TCP frames can match this ACE. Notice the TCP frames
won't match the ACE with Ethernet type
udp: Only UDP frames can match this ACE. Notice the UDP frames
won't match the ACE with Ethernet type
EXAMPLE:
action: ThecommandletsyouconfigureACLportdefault
action
Syntax:
action <port-list> <deny> <permit>.
Parameter :
<port-list> : available value is from switch physic port density, format:
1,3-5
deny : Deny forwarding
Switch(acl)# ace 1 0 port 1 ipv4
Switch(acl/ace-port(ipv4))#
Switch(acl/ace-port(ipv4))# show
ACE ID : 1 Rate Limiter: Disabled
Ingress Port: 1 Port Copy : Disabled
Mirror : Disabled
Type : User Logging : Disabled
Frame Type : IPv4 Shutdown : Disabled
Action : Permit Counter : 0
MAC Parameters VLAN Parameters
-------------- ---------------
DMAC Type : Any 802.1Q Tagged: Any
VLAN ID : Any
Tag Priority : Any
IP Parameters
-------------
Protocol : Any
Source : Any
Destination : Any
TTL : Any
Fragment : Any
Options : Any
Switch(acl/ace-port(any))#
Switch(acl/ace-port(ipv4))# end
Success! ACE ID 1 added last