Reference Guide

264 | ip access-list session Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide
Usage Guidelines
Session ACLs define traffic and firewall policies on the controller. You can configure multiple rules for each
policy, with rules evaluated from top (1 is first) to bottom. The first match terminates further evaluation.
Generally, you should order more specific rules at the top of the list and place less specific rules at the bottom of
the list. The ACL ends with an implicit deny all. To configure IPv6 rules, use the
ipv6 keyword followed by the
regular ACL keywords.
Example
The following command configures a session ACL that drops any traffic from 10.0.0.0 subnetwork:
ip access-list session drop-from10
network 10.0.0.0 255.0.0.0 any any
The following command configures a session ACL with IPv4 and IPv6 address:
(host) (config)#ip access-list session common
(host) (config-sess-common)#host 10.12.13.14 any any permit
(host) (config-sess-common)#ipv6 host 11:12:11:11::2 any any permit
(host) (config-sess-common)#show ip access-list common
Command History
Introduced in ArubaOS 3.0
Command Information
no Negates any configured parameter.
Parameter Description
ip access-list session common
common
-------
Priority Source Destination Service Action ... Queue TOS 8021P ... ClassifyMedia IPv4/6
-------- ------ ----------- ------- ------ ... ----- --- ----- ... ------------- ------
1 1.2.3.4 any any permit ... Low ... 4
2 11:12:11:11::2 any any permit ... Low ... 6
Platform License Command Mode
Available on all platforms Requires the PEFNG license Config mode on master controllers