292 ACL CommandsCommands in this ChapterThis chapter explains the following commands:access-listUse the access-list command in Global Configuration mode to create anAccess Control List (ACL) that is identified by the parameterlist-name.The command specifies the queue identifier to which packets matching thisrule are assigned. The command may also specify the mirror or redirectinterface (unit/slot/port) to which packets matching this rule are copied orforwarded, respectively.The time-range parameter allows imposing time limitation on the ACL ruleas defined by the parametertime-range-name. If a time range with thespecified name does not exist, and the ACL containing this ACL rule isapplied to an interface or bound to a VLAN, then the ACL rule is appliedimmediately. If a time range with specified name exists and the ACLcontaining this ACL rule is applied to an interface or bound to a VLAN, thenthe ACL rule is applied when the time-range with specified name becomesactive. The ACL rule is removed when the time-range with specified namebecomes inactive.access-listlist-name {deny | permit} {every | {{icmp | igmp | ip | tcp |udp |number} any|srcip srcmask[{eq {portkey |0-65535}]dstip dstmask[{eq {portkey |0-65535}] [precedenceprecedence | tostos tosmask | dscpdscp]}[log] [time-rangetime-range-name] [assign-queuequeue-id] [{mirror| redirect}interface-id]no access-listlist-nameaccess-list mac access-list extended renamedeny | permit (IP ACL) service-acl inputdeny | permit (Mac-Access-List-Configuration)show service-acl interfaceip access-group show ip access-listsmac access-group show mac access-listmac access-list extended –
