You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

Back to Table of Contents

Back to Working with Access Control Lists

In this section:

Use EMA and CLI to add or modify Access Control List rules.

For feature description, see IP ACL Policing - Packet Filtering.

Adding/Editing a Rule Using CLI

Use following command to add/edit a rule:

% set addressContext <name> ipAccessControlList...

Mandatory parameters:

  • rule <name>
  • precedence <1-65535>

Non-mandatory parameters (default values are in bold font):

  •  action <accept | discard>
  • bucketSize <1-255, or unlimited>
  • destinationAddressPrefixLength <length, 0>
  • destinationIpAddress <IPv4 / IPv6 Address, 0.0.0.0>
  • destinationPort <0-65535, or any>
  • fillRate <1-10000, unlimited>
  • ipInterface <name>
  • ipInterfaceGroup <name>
  • mgmtIpInterface <name>
  • mgmtIpInterfaceGroup <name>
  • protocol <0–255 | any | icmp | icmpv6 | ospf | tcp | udp>
  • sourceAddressPrefixLength <0-128>
  • sourceIpAddress <IPv4 / IPv6 address, 0.0.0.0>
  • sourcePort <0-65535, or any>
  • state <disbled | enabled>

For parameter descriptions, see  IP Access Control List - CLI

Adding or Editing a Rule Using EMA

See Security Configuration - Ip Access Control List

  • No labels