316
Intel
®
NetStructure™ 480T Routing Switch User Guide
Table 17.1: Access List Configuration Commands
Command Description
create access-list <name> ip destination
[<dst_ipaddress>/<dst_mask> | any] source
[<src_ipaddress>/<src_mask> | any] [deny |
permit <qosprofile> | deny] ports
[<portlist> | any] {precedence <number>}
Creates a named IP access list. The access list is
applied to all ingress packets. Options include:
•
<name>—Specifies the access list name.
The access list name can be between 1 and
16 characters.
•
ip—Specifies an IP access list.
•
destination—Specifies an IP destination
address and subnet mask. A mask length of
32 indicates a host entry. An IP address of
0.0.0.0 is a wildcard and matches all.
•
source—Specifies an IP source address
and subnet mask. An IP address of 0.0.0.0
is a wildcard and matches all.
•
permit—Specifies that the packets
matching the access list description are
permitted to be forwarded by this switch.
An optional Quality of Service (QoS)
profile can be assigned to the access list, to
enable the switch to prioritize packets
accordingly.
•
deny—Specifies that the packets matching
the access list description are filtered
(dropped) by the switch.
•
precedence—Specifies the access list
precedence number. The range is 1 to
25,600.