Access Control Lists (ACL) | 99CommandHistoryUsageInformationThe order option is relevant in the context of the Policy QoS feature only. For more information, referto the Quality of Service (QoS) chapter of the FTOS Configuration Guide.In the MXL Switch, you can configure either count (packets) or count (bytes). However, for an ACLwith multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) atany given time.RelatedCommandsip access-list standardCreate a standard IP access list (IP ACL) to filter based on IP address.Syntax ip access-list standard access-list-nameParametersDefaults All IP access lists contain an implicit deny any, that is, if no match occurs, the packet is dropped.Command Modes CONFIGURATIONCommandHistoryUsageInformationFTOS supports one ingress and one egress IP ACL per interface.The number of entries allowed per ACL is hardware-dependent. For detailed specification on entriesallowed per ACL, refer to your switch documentation.Example Figure 6-4. ip access-list standard Command ExampleRelatedCommandspermit Configure a filter to permit packets from a specific source IP address to leave the switch.Syntax permit {source [mask] | any | host ip-address} [count [byte]] [dscp value] [order]To remove this filter, you have two choices:• Use the no seq sequence-number command if you know the filter’s sequence number.Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Moduleip access-list standard Configures a standard ACL.permit Configures a permit filter.access-list-name Enter a string up to 140 characters long as the ACL name.Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO ModuleFTOS(conf)#ip access-list standard TestListFTOS(conf-std-nacl)#ip access-list extended Creates an extended access list.resequence access-list Displays the current configuration.
