964
ExtremeWare 7.7 Command Reference Guide
Security Commands
create access-list ip destination source ports
create access-list <name> ip destination [<dest_ipaddress>/<mask> | any]
source [<src_ipaddress>/<src_mask> | any] [permit {<qosprofile>} | deny]
ports [<portlist> | any] {precedence <prec_number>}
Description
Creates a named IP access list that applies to all IP traffic.
NOTE
This command is available only on the “i” series switches. To create an access list for an “e” series
switch, use the
create access-list
command.
Syntax Description
Default
N/A
Usage Guidelines
The access list is applied to all ingress packets.
Examples
The following example defines an access list entry allow102 with precedence 40 that permits all traffic
on any ingress ports to the 10.2.x.x subnet, and assigns QoS profile Qp3 to those packets:
create access-list allow102 ip dest 10.2.0.0/16 source 0.0.0.0/0 permit qosprofile qp3
ports any precedence 40
The following command defines a default entry that is used to specify an explicit deny:
name
Specifies the access list name. The access list name can be between 1 and
31 characters.
dest_ipaddress/mask
Specifies an IP destination address and subnet mask. A mask length of 32 indicates
a host entry.
any
specifies that any address will match.
src_ipaddress/src_mask
Specifies a source IP address and subnet mask.
any
specifies that any address will match.
permit
Specifies that packets that match the access list description are permitted to be
forward by this switch.
qosprofile
Specifies an optional QoS profile can be assigned to the access list, so that the
switch can prioritize packets accordingly.
deny
Specifies that packets that match the access list description are filtered (dropped) by
the switch.
portlist
Specifies the ingress port(s) on which this rule is applied.
any
specifies that the rule will be applied to all ports.
prec_number
Specifies the access list precedence number. The range is 1 to 25,600.
Summary of Contents for ExtremeWare 7.7
Page 60: ...60 ExtremeWare 7 7 Command Reference Guide Contents ...
Page 72: ...72 ExtremeWare 7 7 Command Reference Guide Command Reference Overview ...
Page 404: ...404 ExtremeWare 7 7 Command Reference Guide VLAN Commands ...
Page 472: ...472 ExtremeWare 7 7 Command Reference Guide QoS Commands ...
Page 492: ...492 ExtremeWare 7 7 Command Reference Guide NAT Commands ...
Page 890: ...890 ExtremeWare 7 7 Command Reference Guide Security Commands ...
Page 1130: ...1130 ExtremeWare 7 7 Command Reference Guide Security Commands ...
Page 1164: ...1164 ExtremeWare 7 7 Command Reference Guide Configuration and Image Commands ...
Page 1436: ...1436 ExtremeWare 7 7 Command Reference Guide Wireless Commands ...
Page 1490: ...1490 ExtremeWare 7 7 Command Reference Guide EAPS Commands ...
Page 1576: ...1576 ExtremeWare 7 7 Command Reference Guide ESRP Commands ...
Page 1774: ...1774 ExtremeWare 7 7 Command Reference Guide IP Unicast Commands ...
Page 1914: ...1914 ExtremeWare 7 7 Command Reference Guide IGP Commands ...
Page 2000: ...2000 ExtremeWare 7 7 Command Reference Guide BGP Commands i Series Switches Only ...
Page 2140: ...2140 ExtremeWare 7 7 Command Reference Guide IPX Commands i Series Platforms Only ...
Page 2156: ...2156 ExtremeWare 7 7 Command Reference Guide ARM Commands BlackDiamond Switch Only ...
Page 2168: ...2168 ExtremeWare 7 7 Command Reference Guide Remote Connect Commands ...
Page 2346: ...2346 ExtremeWare 7 7 Command Reference Guide PoS Commands BlackDiamond Switch Only ...
Page 2446: ...2446 ExtremeWare 7 7 Command Reference Guide LLDP Commands ...
Page 2496: ...2496 ExtremeWare 7 7 Command Reference Guide H VPLS Commands BlackDiamond Switch Only ...
Page 2620: ...2620 ExtremeWare 7 7 Command Reference Guide Index of Commands ...
