Filter
Top Products
CLI (Command Line Interface)
216
NXA-ENET24 - Software Management Guide
IP ACL Commands (Cont.)
Command Function
show access-list ip mask-
precedence
This command shows the ingress
or egress rule masks for IP ACLs.
Syntax:
show access-list ip mask-precedence [in | out]
• in – Ingress mask precedence for ingress ACLs.
• out – Egress mask precedence for egress ACLs.
Command Mode: Privileged Exec
Example:
Console#show access-list ip mask-precedence
IP ingress mask ACL:
mask host any
mask 255.255.255.0 any
Console#
ip access-group
This command binds a port to an
IP ACL.
Use the no form to remove the
port.
Syntax:
[no] ip access-group acl_name in
• acl_name – Name of the ACL. (Maximum length: 16 characters)
• in – Indicates that this list applies to ingress packets.
Default Setting: None
Command Mode: Interface Configuration (Ethernet)
Command Usage: A port can only be bound to one ACL.
If a port is already bound to an ACL and you bind it to a different ACL, the
switch will replace the old binding with the new one. You must
configure a mask for an ACL rule before you can bind it to a port.
Example:
Console(config)#int eth 1/25
Console(config-if)#ip access-group david in
Console(config-if)#
show ip access-group
This command shows the ports
assigned to IP ACLs.
Command Mode: Privileged Exec
Example:
Console#show ip access-group
Interface ethernet 1/25
IP standard access-list david
Console#
map access-list ip
This command sets the output
queue for packets matching an
ACL rule. The specified CoS
value is only used to map the
matching packet to an
output queue; it is not written to
the packet itself.
Use the no form to remove the
CoS mapping.
Syntax:
[no] map access-list ip acl_name cos cos-value
• acl_name – Name of the ACL. (Maximum length: 16 characters)
• cos-value – CoS value. (Range: 0-7)
Default Setting: None
Command Mode: Interface Configuration (Ethernet)
Command Usage: A packet matching a rule within the specified ACL is
mapped to one of the output queues as shown in the following table. For
information on mapping the CoS values to output queues, see queue cos-
map on page 4-170.
Example:
Console(config)#interface ethernet 1/25
Console(config-if)#map access-list ip bill cos 0
Console(config-if)#