beautypg.com

Ip access-group, No ip access-group, Ip access-group no ip access-group – Dell PowerEdge M600 User Manual

Page 308

background image

288

ACL Commands

www

.dell.com | support.dell.com

Example

The following example configures a MAC ACL to deny traffic from MAC address
0806.c200.0000.

console(config)#mac access-list extended DELL123

console(config-mac-access-list)#deny 0806.c200.0000 ffff.ffff.ffff

any

ip access-group

no ip access-group

Use the ip access-group or no ip access-group command to apply/disable an IP based egress ACL
on an Ethernet interface or a group of interfaces. An IP based ACL should have been created by the
access-list … command with the same name specified in this command.

Syntax

ip access-group name direction

name—Access list name. (Range: Valid IP access-list name up to 31 characters in length)

direction—Direction of the ACL. (Range: In or out)

Default Configuration

This command has no default configuration.

Command Mode

Global and Interface Configuration

User Guidelines

Global mode command configures the ACL on all the interfaces, whereas the interface mode
command does so for the interface.

Examples

console(config)#ip access-group aclname in

console(config)#no ip access-group aclname in

console(config)#ip access-group aclname1 out

console(config-if-1/g1)#ip access-group aclname out

console(config-if-1/g1)#no ip access-group aclname out