Configuring standard numbered acls, Standard numbered acl syntax – Brocade TurboIron 24X Series Configuration Guide User Manual
Page 935

Brocade TurboIron 24X Series Configuration Guide
901
53-1003053-01
Configuring standard numbered ACLs
•
Devices support MAC filters instead of Layer 2 ACLs.
•
You can apply an ACL to a port that has TCP SYN protection or ICMP smurf protection, or both,
enabled.
NOTE
TurboIron X Series devices do not support ACLs on Group VEs, even though the CLI contains
commands for this action.
Configuring standard numbered ACLs
This section describes how to configure standard numbered ACLs with numeric IDs and provides
configuration examples.
Standard ACLs permit or deny packets based on source IP address. You can configure up to 99
standard numbered ACLs. There is no limit to the number of ACL entries an ACL can contain except
for the system-wide limitation. For the number of ACL entries supported on a device, refer to
Standard numbered ACL syntax
Syntax: [no] access-list
or
Syntax: [no] access-list
Syntax: [no] access-list
Syntax: [no] access-list
Syntax: [no] ip access-group
The
The deny | permit parameter indicates whether packets that match a policy in the access list are
denied (dropped) or permitted (forwarded).
The
name.
NOTE
To specify the host name instead of the IP address, the host name must be configured using the
DNS resolver on the device. To configure the DNS resolver name, use the ip dns server-address…
command at the global CONFIG level of the CLI.
The
by the
is a four-part value, where each part is 8 bits (one byte) separated by dots, and each bit is a one or
a zero. Each part is a number ranging from 0 to 255, for example 0.0.0.255. Zeros in the mask
mean the packet source address must match the
example, the
the Class C subnet 10.157.22.x match the policy.