SGS-6341-Series User Manual

41.1.3 Access-list Action and Global Default Action
There are two access-list actions and default actions: “permit” or “deny”. The following rules
apply:
 An access-list can consist of several rules. Filtering of packets compares packet
conditions to the rules, from the first rule to the first matched rule; the rest of the
rules will not be processed. Global default action applies only to IP packets in the
incoming direction on the ports.
 Global default action applies only when packet flirter is enabled on a port and no
ACL is bound to that port, or no binding ACL matches.
41.2 ACL Configuration Task List
ACL Configuration Task Sequence:
1. Configuring access-list
(1) Configuring a numbered standard IP access-list
(2) Configuring a numbered extended IP access-list
(3) Configuring a standard IP access-list based on nomenclature
a) Create a standard IP access-list based on nomenclature
b) Specify multiple “permit” or “deny” rule entries
c) Exit ACL Configuration Mode
(4) Configuring an extended IP access-list based on nomenclature
a) Create an extensive IP access-list based on nomenclature
b) Specify multiple “permit” or “deny” rule entries
c) Exit ACL Configuration Mode
(5) Configuring a numbered standard MAC access-list
(6) Configuring a numbered extended MAC access-list
(7) Configuring a extended MAC access-list based on nomenclature
a) Create a extensive MAC access-list based on nomenclature
b) Specify multiple “permit” or “deny” rule entries
c) Exit ACL Configuration Mode
(8) Configuring a numbered extended MAC-IP access-list
(9) Configuring a extended MAC-IP access-list based on nomenclature
a) Create a extensive MAC-IP access-list based on nomenclature
b) Specify multiple “permit” or “deny” rule entries
c) Exit MAC-IP Configuration Mode
(10) Configuring a numbered standard IPv6 access-list
(11) Configuring a standard IPv6 access-list based on nomenclature
a) Create a standard IPv6 access-list based on nomenclature
41-50
User’s Manual of SGS-6341 series