Werbung
184 Anhang
10.2.4
Security
10.2.4.1
Access Control List
Tabelle 82: CLI "Access Control List" Configuration
Node
enable
configure
configure
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
acl
Handbuch
Version 1.0.0
Command
show access-list
access-list STRING
no access-list STRING
show
action (disable | drop |
permit)
destination mac host
MACADDR
destination mac
MACADDR
destination mac
MACADDR MACADDR
no destination mac
ethertype STRING
no ethertype
source mac host
MACADDR
source mac MACADDR
MACADDR
no source mac
source ip host IPADDR
source ip IPADDR
IPMASK
no source ip
destination ip host
IPADDR
destination ip IPADDR
IPMASK
no destination ip
Industrial-Managed-Switches
852-1816 Lean-Managed.Switch
Description
This command displays all access control profiles.
This command creates a new access control profile,
where "STRING" is the profile name.
This command deletes an access control profile.
This command displays the current access control
profile.
This command processes the profile.
"disable":
The profile is disabled.
"drop":
If packets match the profile, they
are dropped.
"permit": If packets match the profile, they are
forwarded.
This command configures the destination MAC
address and the mask for the profile.
This command configures the destination MAC
address and the mask for the profile.
This command configures the destination MAC
address and the mask for the profile.
The second "MACADDR" parameter is the mask
(e.g., ffff.ffff.0000) for the profile.
This command deletes the destination MAC address
from the profile.
This command configures the ETHERNET type for
the profile, where the "STRING" is a hexadecimal
value, e.g., 08AA.
This command deletes the ETHERNET type limit
from the profile.
This command configures the source MAC address
and the mask for the profile.
This command configures the source MAC address
and the mask for the profile.
This command deletes the source MAC and the
mask from the profile.
This command configures the source IP address for
the profile.
This command configures the source IP address and
the mask for the profile.
This command deletes the source IP address from
the profile.
This command configures a specific destination IP
address for the profile.
This command configures the destination IP address
and the mask for the profile.
This command deletes the destination IP address
from the profile.
Werbung
Kapitel
