Accton Technology 24/48-Port, ES4548D, ES4524D manual Access Control List Commands, IPv4 ACLs

Chapter 44: Access Control List Commands

Access Control Lists (ACL) provide packet filtering for IPv4 frames (based on address, protocol, Layer 4 protocol port number or TCP control code), IPv6 frames (based on address, next header type, or flow label), or any frames (based on MAC address or Ethernet type). To filter packets, first create an access list, add the required rules, and then bind the list to a specific port. This section describes the Access Control List commands.

Table 44-1 Access Control List Commands

Command Groups	Function	Page
IPv4 ACLs	Configures ACLs based on IPv4 addresses, TCP/UDP port number,	44-1
	protocol type, and TCP control code
IPv6 ACLs	Configures ACLs based on IPv6 addresses, next header type, and flow	44-7
	label
MAC ACLs	Configures ACLs based on hardware addresses, packet format, and	44-12
	Ethernet type
ACL Information	Displays ACLs and associated rules; shows ACLs assigned to each port	44-16

IPv4 ACLs

The commands in this section configure ACLs based on IPv4 addresses, TCP/UDP port number, protocol type, and TCP control code. To configure IPv4 ACLs, first create an access list containing the required permit or deny rules, and then bind the access list to one or more ports

Table 44-2 IPv4 ACL Commands

Command	Function	Mode	Page
access-list ip	Creates an IPv4 ACL and enters configuration mode for	GC	44-2
	standard or extended IPv4 ACLs
permit, deny	Filters packets matching a specified source IPv4 address	IPv4-	44-2
		STD-ACL
permit, deny	Filters packets meeting the specified criteria, including	IPv4-	44-3
	source and destination IPv4 address, TCP/UDP port	EXT-ACL
	number, protocol type, and TCP control code
show ip access-list	Displays the rules for configured IPv4 ACLs	PE	44-5
ip access-group	Adds a port to an IPv4 ACL	IC	44-6
show ip access-group	Shows port assignments for IPv4 ACLs	PE	44-6

44-1