beautypg.com

Insert – Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 916

background image

904

Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

12

rfs7000-37FABE(config-ip-acl-auto-tunnel-acl)#disable permit ip host

200.200.200.99 any rule-precedence 3

rfs7000-37FABE(config-ip-acl-auto-tunnel-acl)#

The following example shows the ‘auto-tunnel-acl’ settings after the disable

command is executed:

rfs7000-37FABE(config-ip-acl-auto-tunnel-acl)#show context

ip access-list auto-tunnel-acl

permit ip host 200.200.200.99 30.30.30.1/24 rule-precedence 2

disable permit ip host 200.200.200.99 any rule-precedence 3

rfs7000-37FABE(config-ip-acl-auto-tunnel-acl)#

rfs4000-229D58(config-ip-acl-test)#deny icmp any any log rule-precedence 1

rfs4000-229D58(config-ip-acl-test)#show context

ip access-list test

deny icmp any any rule-precedence 1

rfs4000-229D58(config-ip-acl-test)#

rfs4000-229D58(config-ip-acl-test)#disable deny icmp any any rule-precedence 1

rfs4000-229D58(config-ip-acl-test)#show context

ip access-list test

disable deny icmp any any rule-precedence 1

rfs4000-229D58(config-ip-acl-test)#

Related Commands:

insert

ip-access-list

Enables the insertion of a rule in an IP ACL without overwriting or replacing an existing rule having
the same precedence

The insert option allows a new rule to be inserted within a IP access list. Consider an IP ACL
consisting of rules having precedences 1, 2, 3, 4, 5, and 6. You want to insert a new rule with
precedence 4, without overwriting the existing precedence 4 rule. Using the insert option inserts
the new rule prior to the existing one. The existing precedence 4 rule’s precedence changes to 5,
and the change cascades down the list of rules within the ACL. That means rule 5 becomes rule 6,
and rule 6 becomes rule 7.

NOTE

NOT using insert when creating a new rule having the same precedence as an existing rule,
overwrites the existing rule.

Supported in the following platforms:

no

Enables a disabled deny or permit rule

deny

Creates a new deny access rule or modifies an existing rule

permit

Creates a new permit access rule or modifies an existing rule

alias

Creates and configures a aliases (network, VLAN, and service)