Accton Technology ES4626 - Manual (Page 765)

765
Egress IPv6 ACL;
Egress MAC-IP ACL;
Egress MAC ACL;
Egress IP ACL;
Ingress IPv6 AC;
Ingress MAC-IP ACL;
Ingress MAC ACL;
Ingress IP ACL;
4． Egress ACL only can specify deny behavior;
When executing port binding command, it can’t be correctly bound, and output
prompt information, if the rules are much complex and beyond hardware
capability.
The exit rule does not have an effect in software transfer and switch itself sending
data situation.
Example:
Binding aaa access-list to entry direction of port
Switch(Config-Ethernet1/1)#ip access-group aaa in
18.2.2.17 mac access extended
Command: Mac-access-list extended
no mac-access-list extended
Functions : Define a name-manner MAC ACL or enter access-list configuration mode,‘no
mac-access-list extended ’ command deletes this ACL.
Parameters:
name of access-list excluding blank or quotation mark, and it must
start with letter, and the length cannot exceed 16 (remark: sensitivity on capital or small
letter.)
Command Mode: Global mode
Default Configuration: No access-lists configured
Usage Guide:After assigning this commands for the first time, only an empty name
access-list is created and no list item included.
Examples:
Create an MAC ACL named MAC ACL.
Switch(Config)# mac-access-list extended mac_acl
Switch(Config-Mac-Ext-Nacl-mac_acl)#
18.2.2.18 mac-ip access extended
Command: Mac-ip-access-list extended
no mac-ip-access-list extended
Functions : Define a name-manner MAC-IP ACL or enter access-list configuration mode,
‘
no mac-ip-access-list extended ’ command deletes this ACL.