|
2064.4. Access Control ConfigurationConfigure access control in "Global configuration mode."When using both access control and link aggregation functions, assign apractical physical port number to a port list, not a logical port created in linkaggregation.Command to show the classifier configurationM24eG# show AccessControl classifier {all | -number>}Command to show the in-profile configurationM24eG# show AccessControl inprofileCommand to show the out-profile configurationM24eG# show AccessControl outprofileCommand to show the port list configurationM24eG# show AccessControl portlistCommand to show the policy configurationM24eG# show AccessControl policy {all | -number>}Command to show the policy sequence configurationM24eG# show AccessControl policy-sequence port num> sort {policy-index |sequence}Command to configure the classifierM24eG(Config)# AccessControl classifier [src-mac ][dst-mac ][src-net -mask>][dst-net -mask>][src-port -port-list>][dst-port -port-list>][vlan-id ][dot1p-priority ][dscp ][protocol -num>][icmp-type ][tcp-syn-flag{true/false}]Command to delete the classifierM24eG(Config)# no AccessControl classifier Command to configure the in-profileM24eG(Config)# AccessControl inprofile {deny | permit { dscp -value> |precedence -value>| cos -value>}}Command to delete the in-profileM24eG(Config)# no AccessControl inprofile
|
