beautypg.com

Access-list standard named filter) – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 918

background image

IPv4 Software Access Control List (ACL) Commands

Software Reference for x310 Series Switches

35.32

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

(access-list standard named filter)

This ACL filter adds a source IP address filter entry to a current named standard access-list.
If the sequence number is specified, the new filter entry is inserted at the specified
location. Otherwise, the new entry is added at the end of the access-list.

The no variant of this command removes a source IP address filter entry from the current
named standard access-list. You can specify the source IP address filter entry for removal
by entering either its sequence number (e.g. no 10), or by entering its source IP address
filter profile without specifying its sequence number.

Note that the sequence number can be found by running the

show access-list (IPv4

Software ACLs)

command.

Syntax

[<sequence-number>] {deny|permit} {<source> [exact-match]|any}

no {deny|permit} {<source> [exact-match]|any}

no <sequence-number>

Mode

IPv4 Standard ACL Configuration

Default

Any traffic controlled by a software ACL that does not explicitly match a filter is denied.

Parameter

Description

<sequence-number>

<1-65535>
The sequence number for the filter entry of the
selected access control list.

deny

Access-list rejects packets of the source filtering
specified.

permit

Access-list allows packets of the source filtering
specified

<source>

The source address of the packets. You can specify
either a subnet or all sources. The following are the
valid formats for specifying the source:

<ip-addr>/
<prefix>

An IPv4 address, followed by a
forward slash, then the prefix
length. This matches any
destination IP address within
the specified subnet.

An IPv4 address in a.b.c.d
format.

exact-match

Specify an exact IP prefix to match on.

any

Matches any source IP address.