beautypg.com

3Com WX4400 3CRWX440095A User Manual

Page 398

background image

398

C

HAPTER

19: C

ONFIGURING

AND

M

ANAGING

S

ECURITY

ACL

S

3 To view details about these uncommitted ACEs, type the following

command.

WX1200# display security acl info all editbuffer
ACL edit-buffer information for all
set security acl ip acl-111 (ACEs 3, add 3, del 0, modified 2)
----------------------------------------------------

1. permit IP source IP 192.168.254.12 0.0.0.0 destination IP any

2. permit IP source IP 192.168.253.11 0.0.0.0 destination IP any

3. deny SRC source IP 192.168.253.1 0.0.0.255

set security acl ip acl-a (ACEs 1, add 1, del 0, modified 0)
----------------------------------------------------
1. permit SRC source IP 192.168.1.1 0.0.0.0

4 To clear the uncommitted acl-111 ACE from the edit buffer, type the

following command:

WX1200# rollback security acl acl-111

5 To ensure that you have cleared the acl-111 ACE, type the following

command. Only the uncommitted acl-a now appears.

WX1200# display security acl info all editbuffer
ACL edit-buffer information for all
set security acl ip acl-a (ACEs 1, add 1, del 0, modified 0)
----------------------------------------------------
1. permit SRC source IP 192.168.1.1 0.0.0.0

6 Alternatively, to clear the entire edit buffer of all changes made since a

security ACL was last committed and display the results, type the
following commands:

WX1200# rollback security acl all
WX1200# display security acl info all editbuffer
ACL edit-buffer information for all