Acl filter sequence configuration, Step 1: create a new acl and add a new filter, Step 2: add another filter to the acl – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 841

Access Control Lists Introduction

Software Reference for x310 Series Switches

C613-50046-01 REV A

AlliedWare Plus

Operating System - Version 5.4.4C

33.17

■

To create an IPv6 Extended ACL and then define ACL filters at the IPv6 Extended
Configuration mode prompt awplus(config-ipv6-ext-acl)#, enter the following
commands:

■

To create an IPv6 Hardware ACL and then define ACL filters at the IPv6 Hardware
Configuration mode prompt awplus(config-ipv6-hw-acl)

, enter the following

commands:

ACL Filter Sequence Configuration

First create a named or numbered ACL to enter ACL filters in the ACL sub-modes available:

Step 1:

Create a new ACL and add a new filter

Create ACL 10 and then add a new filter to the access-list to permit all packets from the

192.168.1

subnet:

Step 2:

Add another filter to the ACL

Append to, or add at the end of, ACL 10 a new filter to deny all packets from the
192.168.2

subnet:

awplus(config)#

ipv6 access-list extended ipv6_ex-
t_name

awplus(config-ipv6-ext-acl)#

permit ip 2001:db8::/64
2001:db9::/64

awplus#

configure terminal

awplus(config)#

access-list 10

awplus(config-ip-std-acl)#

permit 192.168.1.0 0.0.0.255

awplus(config-ip-std-acl)#

end

awplus#

show access-list 10

Standard IP access list 10
10 permit 192.168.1.0, wildcard bits 0.0.0.255

awplus#

configure terminal

awplus(config)#

access-list 10

awplus(config-ip-std-acl)#

deny 192.168.2.0 0.0.0.255

awplus(config-ip-std-acl)#

end

awplus#

show access-list 10