Allied Telesis AT-FS970M Series - Manual (Page 1505)

AT-FS970M Switch Command Line User’s Guide
1505
Creating ACLs
This section provides examples of how to create all of the ACL types. See
the following:
 “Creating Numbered IPv4 ACLs” on page 1505
 “Creating Numbered MAC ACLs” on page 1517
 “Creating Named IPv4 Address ACLs” on page 1519
 “Creating Named IPv6 Address ACLs” on page 1521
For descriptions of the commands mentioned in these procedures, refer to
Chapter 97, “ACL Commands” on page 1539.
Creating
Numbered IPv4
ACLs
Depending on the type of filter that you want to create, there are five
commands for creating Numbered IPv4 ACLs. These commands are listed
in Table 157. All of the commands for creating Numbered IPv4 ACLs begin
with “ACCESS-LIST” and are found in the Global Configuration mode.
For examples of the commands listed in Table 157, see the following:
 “Numbered IPv4 ACL with IP Packets Examples” on page 1506
 “Numbered IPv4 ACL with ICMP Packets Example” on page 1510
 “Numbered IPv4 ACL with Protocol Packets Example” on page 1512
 “Numbered IPv4 ACL with TCP Port Packets Example” on page 1513
 “Numbered IPv4 ACL with UDP Port Packets Example” on page 1515
Table 157. ACCESS-LIST Commands for Creating Numbered IPv4 ACLs
To Do This Task Use This Command
Create Numbered IPv4 ACLs for
source and destination IPv4
addresses. ACCESS-LIST id_number action IP
src_ipaddress dst_ipaddress [VLAN vid]
Create Numbered IPv4 ACLs for
ICMP packets. ACCESS-LIST id_number action ICMP
src_ipaddress dst_ipaddress [VLAN vid ]
Create Numbered IPv4 ACLs for
packets of specified protocols. ACCESS-LIST id_number action PROTO
protocol_number src_ipaddress
dst_ipaddress
[vlan vid ]
Create Numbered IPv4 ACLs that filter
ingress packets based on TCP port
numbers. ACCESS-LIST id_number action TCP
src_ipaddress EQ|LT|GT|NE|RANGE
src_tcp_port dst_ipaddress
EQ|LT|GT|NE|RANGE dst_tcp_port [VLAN vid ]