Access Control List (Acl) Commands - D-Link DXS-3600-16S Manual

Access Control List (ACL) Commands

Throughout this chapter, we'll refer to two abbreviates called:
ACL - Access Control List.
ACE - Access Control Entry
3-1 ip access-list standard
This command is used to create or modify a standard IP ACL. This command will enter into the standard IP access-list
configuration mode. Use the no command to remove a standard IP access-list.
ip access-list standard {[id | name]}
no ip access-list standard {id | name}
Parameters
id
name
Default
Command Mode
Command Default Level
Usage Guideline
Example
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#ip access-list standard Std-ip
DXS-3600-32S(config-std-nacl)#end
DXS-3600-32S#show access-list
Standard IP access list 1999 Std-ip
DXS-3600-32S#
3-2 permit | deny (ip standard access-list)
Use the permit command to add a permit entry. Use the deny command to add a deny entry. Use the no command to
remove an entry.
[sn] {permit | deny} {source source-wildcard | host source | any}
no sn
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
Enter the ID of standard IP ACL here. This value must be between 1 and 1999.
The name of the standard IP access-list to be configured. The name can be up to 32
characters.
None.
Global Configuration Mode.
Level: 12
Standard IP ACL only filters the IPv4 packet.
The name must be unique among all (including MAC, IP, IPv6 or Expert) access-lists
and the first character of name must be a letter.
When creating an ACL, through assigning a name, an ID will be assigned
automatically. The ID assignment rule will start from the maximum ID of 1999 and
decrease 1 per new ACL.
When creating an ACL through assigning an ID, a name will be assigned
automatically. The name assignment rule is 'std-ip' + "-" + ID. If this name conflicts
with the name of an existing ACL, then it will be renamed based on the following rule:
'std-ip' + "-" + ID +"alt".
This example shows how to create a standard ACL.
17