SMC Networks SMC8624/48T IP ACLs, Masks for Access Control Lists, Access Control List Commands

COMMAND LINE INTERFACE

6.Explicit default rule (permit any any) in the ingress MAC ACL for ingress ports.

7.If no explicit rule is matched, the implicit default is permit all.

Masks for Access Control Lists

You can specify optional masks that control the order in which ACL rules are checked. The switch includes two system default masks that pass/filter packets matching the permit/deny rules specified in an ingress ACL. You can also configure up to seven user-defined masks for an ACL. A mask must be bound exclusively to one of the basic ACL types (i.e., Ingress IP ACL, Egress IP ACL, Ingress MAC ACL or Egress MAC ACL), but a mask can be bound to up to four ACLs of the same type.

Table 4-26. Access Control List Commands

Command Groups	Function	Page
IP ACLs	Configure ACLs based on IP addresses, TCP/	4-116
	UDP port number, protocol type, and TCP control
	code
MAC ACLs	Configure ACLs based on hardware addresses,	4-135
	packet format, and Ethernet type
ACL Information	Display ACLs and associated rules; shows ACLs	4-148
	assigned to each port

IP ACLs

Table 4-27. IP ACL Commands

Command	Function	Mode	Page
access-list ip	Creates an IP ACL and enters	GC	4-118
	configuration mode for standard or
	extended IP ACLs
permit, deny	Filters packets matching a specified	STD-ACL	4-119
	source or destination IP address

4-116