White Papers

Usage
Information
When you use the access-class access-list-name command without specifying the ipv4 or
ipv6 attribute, both IPv4 as well as IPv6 rules that are defined in that ACL are applied to the terminal.
This is a generic way of configuring access restrictions.
To be able to filter access exclusively using either IPv4 or IPv6 rules, you must use either the ipv4
or ipv6 attribute along with the access-class access-list-name command. Depending on the
attribute that you specify (ipv4 or ipv6), the ACL processes either IPv4 or IPv6 rules, but not both.
Using this configuration, you can set up two different types of access classes with each class processing
either IPv4 or IPv6 rules separately.
However, if you already have configured generic IP ACL on a terminal line, then you cannot further apply
IPv4 or IPv6 specific filtering on top of this configuration. Because, both IPv4 and IPv6 access classes are
already configured on this terminal line. Before applying either IPv4 or IPv6 filtering, you must first undo
the generic configuration using the no access-class access-list-name command.
Similarly, if you have configured either IPv4 or IPv6 specific filtering on a terminal line, you cannot apply
generic IP ACLs on top of this configuration. Before applying the generic ACL configuration, you must
first undo the existing configuration using the no access-class access-list-name [ipv4 |
ipv6] command.
clear counters ip access-group
Erase all counters maintained for access lists.
Syntax
clear counters ip access-group [access-list-name]
Parameters
access-list-name (OPTIONAL) Enter the name of a configured access-list, up to 140 characters.
Command Modes EXEC Privilege
Supported Modes Full–Switch
Command
History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
ip access-group
Apply an egress IP ACL to an interface.
Syntax
ip access-group access-list-name {in | out} [implicit-permit] [vlan vlan-
id] [layer3]
Parameters
access-list-name Enter the name of a configured access list, up to 140 characters.
in Enter the keyword in to apply the ACL to incoming traffic.
out Enter the keyword out to apply the ACL to the outgoing traffic.
implicit-permit (OPTIONAL) Enter the keyword implicit-permit to change the default action
of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not
match the filters in the ACL, the traffic is permitted instead of dropped).
vlan vlan-id (OPTIONAL) Enter the keyword vlan then the ID numbers of the VLANs.
layer3 (OPTIONAL) Enter the keyword layer3 to enable layer 3 mode. It ensures that all
the ACL rules in the access-group are applied only for L3 router packets.
Defaults Not enabled..
Command Modes INTERFACE
Access Control Lists (ACL) 145