beautypg.com

1 no ip access-list, 3 ip access-list rename, 4 {deny | permit} (ip acl) – Kontron AT8404 CLI User Manual

Page 206: Ip access-list rename - 32, Deny | permit} (ip acl) - 32, Quality of service (qos) commands at8404

background image

Quality of Service (QoS) Commands

AT8404

AT8404 CLI Reference Manual

Page 3 - 32

3.8.2.1

no ip access-list

This command deletes the IP ACL identified by from the system.

3.8.3

ip access-list rename

This command changes the name of an IP Access Control List (ACL). The <name> parameter is the names of an
existing IP ACL. The name> parameter is a case-sensitive alphanumeric string from 1 to 31 characters
uniquely identifying the IP access list.

This command fails is an IP ACL by the name name> already exists.

3.8.4

{deny | permit} (IP ACL)

This command creates a new rule for the current IP access list. Each rule is appended to the list of configured rules
for the list.

A rule may either deny or permit traffic according to the specified classification fields. At a minimum, either the every
keyword or the protocol, source address, and destination address values must be specified. The source and
destination IP address fields may be specified using the keyword ‘

any

’ to indicate a match on any value in that field.

The remaining command parameters are all optional, but the most frequently used parameters appear in the same
relative order as shown in the command format.

The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches
this rule. The allowed value is 0-(n-1), where n is the number of user configurable queues available
for the hardware platform. The assign-queue parameter is valid only for a permit rule.

Format

ip access-list

Mode

Global Config

Format

no ip access-list

Mode

Global Config

Format

ip access-list rename

Mode

Global Config

Note: The 'no' form of this command is not supported, since the rules within an IP ACL cannot be deleted
individually. Rather, the entire IP ACL must be deleted and re-specified.

Note: An implicit 'deny all' IP rule always terminates the access list.

Note: The mirror parameter allows the traffic matching this rule to be copied to the specified port>, while the redirect parameter allows the traffic matching this rule to be forwarded to the specified
. The assign-queue and redirect parameters are only valid for a permit rule.