3 vacl ip access-group, 4 vacl ipv6 access-group, Vacl ip access – PLANET XGS3-24042 User Manual
Page 1027: Group, Vacl ipv, Access
55-3
55.3 vacl ip access-group
Command:
vacl ip access-group {<1-299> | WORD} {in | out} [traffic-statistic] vlan WORD
no vacl ip access-group {<1-299> | WORD} {in | out} vlan WORD
Function:
This command configure VACL of IP type on the specific VLAN.
Parameter:
<1-299> | WORD: Configure the numeric IP ACL (include: standard ACL rule <1-99>, extended ACL
rule <100-299>) or the named ACL.
in | out: Filter the ingress/egress traffic.
traffic-statistic: Enable the statistic of matched packets number.
vlan WORD: The VLAN will be bound to VACL.
Command mode:
Global Mode.
Usage Guide:
Use “;” or “-” to input the VLAN or multi-VLANs, but do not exceed 128, and CLI length can not
exceed 80 characters. At present, IP ACL that match tcp/udp range can not be bound to VLAN
Egress direction.
Example:
Configure the numeric IP ACL and enable the statistic function for Vlan 1-5, 6, 7-9.
Switch(config)#vacl ip access-group 1 in traffic-statistic vlan 1-5; 6; 7-9
55.4 vacl ipv6 access-group
Command:
vacl ipv6 access-group (<500-699> | WORD) {in | out} (traffic-statistic|) vlan WORD
no ipv6 access-group {<500-699> | WORD} {in | out} vlan WORD
Function:
This command configure VACL of IPv6 on the specific VLAN.
Parameter:
<500-699> | WORD: Configure the numeric IP ACL (include: IPv6 standard ACL rule <500-599>,
IPv6 extended ACL rule <600-699>) or the named ACL.
in | out: Filter the ingress/egress traffic.
traffic-statistic: Enable the statistic of matched packets number.
vlan WORD: The VLAN will be bound to VACL.