2.5.2 - Force10 Networks

access-list 100-199 {deny | permit} {every | icmp | igmp | ip | tcp | udp | protocol_number} {any
| srcip srcmask} {any | eq {portkey | 0-65535}{any | dstip dstmask} [eq {portkey | 0-65535}]
[precedence precedence | tos tos tosmask | dscp dscp] [log] [assign-queue queue-id] [{mirror |
redirect} unit/slot/port]
Force10 (Config)#access-list 100 permit ip any eq 80 any assign-queue 2 redirect 1/0/40
Force10 (Config)#
Figure 158 Using the access-list Command for an Extended IP ACL Rule
Note: In both versions of the access-list command, above, srcmask is an inverse mask.
Note: You cannot edit a rule once it is created, you must delete the list and create one as desired.
• Attach a specified ACL to the selected interface:
— ip access-group ACLnumber [1-4294967295] in
The optional 1-4294967295 variable is an integer that indicates the order of application of
this ACL relative to other ACLs assigned to this interface.
Force10 (Config)#interface 1/0/21
Force10 (Interface 1/0/21)#ip access-group 100 1 in
Figure 159 Using the ip access-group Command
When the ip access-group command is used in Interface Config mode, it attaches a specified ACL to the
selected interface. In Global Config mode, the command attaches a specified ACL to all interfaces.
• Display a summary of all created IP Access Control Lists (ACLs), or details about the rules that are
defined for a specific ACL:
— show ip access-lists [ACLnumber]
Force10 #show ip access-lists
Current number of ACLs: 2 Maximum number of ACLs: 100
ACL ID Rules Interface(s) Direction
------ ----- ------------------------- ---------
1 1
100 1 1/0/21 inbound
Force10 #show ip access-lists 100
ACL ID: 100
Interface: 1/0/21
Rule Number: 1
Action......................................... permit
Match All...................................... FALSE
Protocol....................................... 255(ip)
Source L4 Port Keyword......................... 80(www/http)
Assign Queue................................... 2
Redirect Interface............................. 1/0/40
Force10 #
Figure 160 Sample show ip access-lists Command Output
SFTOS Configuration Guide, Version 2.5.2.0 209