Allied Telesis AT-8100 Series - Manual (Page 1527)

AT-8100 Switch Command Line User’s Guide
1527
Creating ACLs
This section provides examples of how to create all of the ACL types. See
the following:
 “Creating Numbered IPv4 ACLs” on page 1527
 “Creating Numbered MAC ACLs” on page 1539
 “Creating Named IPv4 Address ACLs” on page 1541
 “Creating Named IPv6 Address ACLs” on page 1543
For descriptions of the commands mentioned in these procedures, refer to
Chapter 99, “ACL Commands” on page 1561.
Creating
Numbered IPv4
ACLs
Depending on the type of filter that you want to create, there are five
commands for creating Numbered IPv4 ACLs. These commands are listed
in Table 159. All of the commands for creating Numbered IPv4 ACLs begin
with “ACCESS-LIST” and are found in the Global Configuration mode.
For examples of the commands listed in Table 159, see the following:
 “Numbered IPv4 ACL with IP Packets Examples” on page 1528
 “Numbered IPv4 ACL with ICMP Packets Example” on page 1532
 “Numbered IPv4 ACL with Protocol Packets Example” on page 1534
 “Numbered IPv4 ACL with TCP Port Packets Example” on page 1535
 “Numbered IPv4 ACL with UDP Port Packets Example” on page 1537
Table 159. ACCESS-LIST Commands for Creating Numbered IPv4 ACLs
To Do This Task Use This Command
Create Numbered IPv4 ACLs for
source and destination IPv4
addresses. ACCESS-LIST id_number action IP
src_ipaddress dst_ipaddress [VLAN vid]
Create Numbered IPv4 ACLs for
ICMP packets. ACCESS-LIST id_number action ICMP
src_ipaddress dst_ipaddress [VLAN vid ]
Create Numbered IPv4 ACLs for
packets of specified protocols. ACCESS-LIST id_number action PROTO
protocol_number src_ipaddress
dst_ipaddress
[vlan vid ]
Create Numbered IPv4 ACLs that filter
ingress packets based on TCP port
numbers. ACCESS-LIST id_number action TCP
src_ipaddress EQ|LT|GT|NE|RANGE
src_tcp_port dst_ipaddress
EQ|LT|GT|NE|RANGE dst_tcp_port [VLAN vid ]