200 Configuring Switch Infor mationw w w . d e l l . c o m | s u p p o r t . d e l l . c o m Assigning IP-based ACEs to ACLs Using the CLI CommandsThe following table summarizes the equivalent CLI commands for assigning IP-basedACEs to ACLs as displayed in the Add ACE to IP Based ACL page.The following is an example of the CLI commands:Permit 00:00:bo:11:11:11 0:0:0:0:0:0 any VLAN 4deny 00:00:bo:11:11:11 0:0:0:0:0:0 any VLAN 4Defining MAC-Based ACLsThe Add ACE to MAC Based ACL page allows network administrators to define MAC-based Access Control Entry (ACE) and Access Control Lists (ACLs). ACEs act as filters tomatch packets to forwarding criteria. To open the Add ACE to MAC Based ACL:• Select Switch > Network Security > MAC Based ACL. The Add ACE to MACBased ACL page opens.CLI Command Descriptionip access-list name Enters to IP-Access listconfiguration mode.permit {any | protocol} {any |{source source-wildcard}} {any| {destination destination-wildcard}} [dscp dscp number | ip-precedence ip-precedence]Allows traffic if the conditionsdefined in the permit statementare matched.deny [disable-port] {any| protocol}{any | {source source-wildcard}} {any | {destinationdestination-wildcard}} [dscpdscp number | ip-precedence ip-precedence]Denies traffic if the conditionsdefined in the deny statement arematched.
