User Manual

[Description]
Applies a MAC access list to the LAN/SFP port.
If the received frame matches the conditions in the access list, the action in the access list will be the action (permit, deny) for
the corresponding frame.
If this command is executed with the "no" syntax, the applied access list is deleted from the LAN/SFP port.
[Note]
The restrictions of the access list apply only to frames that are subject to being relayed. Frames that are transmitted
autonomously are excluded from these restrictions.
It is not possible to register multiple access lists for a single interface.
Access lists can be applied only to LAN/SFP ports. (Logical interfaces are not supported.)
[Example]
Apply access list #1 to received frames of LAN port #100.
SWP1(config)#interface ge1
SWP1(config-if)#mac access-group 100 in
13.1.13 Show generated standard IPv4 access list
[Syntax]
show ip access-list [
std-ip-acl-id]
[Parameter]
std-ip-acl-id : <1-99>, <1300-1999>
ID of standard IPv4 access list
[Input mode]
unprivileged EXEC mode、priviledged EXEC mode
[Description]
Shows the registered standard IPv4 access list.
If std-ip-acl-id is omitted, all IPv4 access lists are shown.
[Example]
Show a list.
SWP1>show ip access-list
Standard IP access list 3
deny 10.0.6.0, wildcard bits 0.0.0.255
13.1.14 Show generated extended IPv4 access list
[Syntax]
show ip access-list [ext-ip-acl-id]
[Parameter]
ext-ip-acl-id : <100-199>, <2000-2699>
ID of extended IPv4 access list
[Input mode]
unprivileged EXEC mode、priviledged EXEC mode
[Description]
Shows the registered extended IPv4 access list.
If ext-ip-acl-id is omitted, all IPv4 access lists are shown.
[Example]
Show a list.
SWP1>show ip access-list
Extended IP access list 100
permit any host 10.0.6.195 any
176 | Command Reference | Traffic control