Cisco Systems OL-6244-01 Switch User Manual


  Open as PDF
of 1438
 
2-630
Catalyst 6500 Series Switch Command Reference—Release 8.4
OL-6244-01
Chapter 2 Catalyst 6500 Series Switch and ROM Monitor Commands
set security acl ipx
set security acl ipx
To create a new entry in a standard IPX VACL and to append the new entry at the end of the VACL, use
the set security acl ipx command.
set security acl ipx {acl_name} {permit | deny | redirect mod_num/port_num} {protocol}
{src_net} [dest_net.[dest_node] [[dest_net_mask.]dest_node_mask]] [capture]
[before editbuffer_index | modify editbuffer_index]
Syntax Description
Defaults There are no default ACLs and no default ACL-VLAN mappings.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines Configurations you make by entering this command are saved to NVRAM and hardware only after you
enter the commit command. Enter ACEs in batches, and then enter the commit command to save all of
them in NVRAM and in the hardware.
acl_name Unique name that identifies the list to which the entry belongs.
permit Allows traffic from the specified source IPX address.
deny Blocks traffic from the specified source IPX address.
redirect Redirects traffic from the specified source IPX address.
mod_num/port_num Number of the module and port.
protocol Keyword or number of an IPX protocol; valid values are from 0 to 255
representing an IPX protocol number. See the “Usage Guidelines” section for a
list of valid keywords and corresponding numbers.
src_net Number of the network from which the packet is being sent. See the “Usage
Guidelines” section for format guidelines.
dest_net. (Optional) Number of the network from which the packet is being sent.
dest_node (Optional) Node on destination-network to which the packet is being sent.
dest_net_mask. (Optional) Mask to be applied to the destination network. See the “Usage
Guidelines” section for format guidelines.
dest_node_mask (Optional) Mask to be applied to the destination-node. See the “Usage
Guidelines” section for format guidelines.
capture (Optional) Specifies packets are switched normally and captured.
before
editbuffer_index
(Optional) Inserts the new ACE in front of another ACE.
modify
editbuffer_index
(Optional) Replaces an ACE with the new ACE.