Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) - Manual (Page 874)

IPv4 Hardware Access Control List (ACL) Commands
Software Reference for x310 Series Switches
34.28 AlliedWare Plus TM Operating System - Version 5.4.4C C613-50046-01 REV A
Mode IPv4 Hardware ACL Configuration
Default Any traffic on an interface controlled by a hardware ACL that does not explicitly match a
filter is permitted.
Usage First create a named hardware access-list that applies the appropriate permit, deny
requirements etc. Then use the
access-group command on page 34.4 to apply this
access-list to a specific port or range. Note that this command will apply the access-list
only to incoming data packets.
An ACL can be configured with multiple ACL filters using sequence numbers. If the
sequence number is omitted, the next available multiple of 10 will be used as the
sequence number for the new filter. A new ACL filter can be inserted into the middle of an
existing list by specifying the appropriate sequence number.
Examples To add an access-list filter entry to the access-list named my-list that will permit any
type of IP packet with a source address of 192.168.1.1 and any destination address,
use the commands:
any Matches any source MAC address.
<mac-destination-
address> The destination host’s MAC address, entered in
HHHH.HHHH.HHHH format.
<mac-destination-
mask> The destination host’s wildcard mask entered in
HHHH.HHHH.HHHH format.
where Hex FF = Ignore, and Hex 00 = Match.
any Matches any destination MAC address.
Parameter(cont.) Description(cont.)
Note The access control list being configured is selected by running the access-list
hardware (named) command on page 34.19 . with the required access control
list number, or name, but with no further parameters selected.
Note Hardware ACLs will permit access unless explicitly denied by an ACL action.
awplus# configure terminal
awplus(config)# access-list hardware my-list
awplus(config-ip-hw-acl)# permit ip 192.168.1.1/32 any