Home » Netgear Manuals » Hubs & Switches » Netgear M5300-28G3 » Manual Viewer

Netgear M5300-28G3 Command Line Interface (CLI) User Manual - Page 495

IP Access Control List (ACL) Commands, ACL. Use

Add to My Manuals
Save this manual to your list of manuals

Page 495 highlights

ProSafe Managed Switch show mac access-lists This command displays a MAC access list and all of the rules that are defined for the MAC ACL. Use the [name] parameter to identify a specific MAC ACL to display. Format Mode show mac access-lists [name] Privileged EXEC Term Definition Rule Number The ordered rule number identifier defined within the MAC ACL. Action The action associated with each rule. The possible values are Permit or Deny. Source MAC Address The source MAC address for this rule. Destination The destination MAC address for this rule. MAC Address Ethertype The Ethertype keyword or custom value for this rule. VLAN ID The VLAN identifier value or range for this rule. COS The COS (802.1p) value for this rule. Log Displays when you enable logging for the rule. Assign Queue The queue identifier to which packets matching this rule are assigned. Mirror Interface The unit/slot/port to which packets matching this rule are copied. Redirect Interface The unit/slot/port to which packets matching this rule are forwarded. Time Range name Displays the name of the time-range if the MAC ACL rule has referenced a time range. Rule Status Status (Active/Inactive) of the MAC ACL rule IP Access Control List (ACL) Commands This section describes the commands you use to configure IP ACL settings. IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply to IP ACLs: • Managed switch software does not support IP ACL configuration for IP packet fragments. • The maximum number of ACLs you can create is hardware dependent. The limit applies to all ACLs, regardless of type. • The maximum number of rules per IP ACL is hardware dependent. • Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in the bit positions that are used for the network address, and has zeros (0's) for the bit Quality of Service (QoS) Commands 495

Section	Page
ProSafe Managed Switch	1
Contents	3
1. Using the Command-Line Interface	8
Licensing and Command Support	8
Command Syntax	10
Command Conventions	11
Common Parameter Values	11
Unit/Slot/Port Naming Convention	12
Using a Command’s “No” Form	13
Managed Switch Modules	13
Command Modes	14
Command Completion and Abbreviation	17
CLI Error Messages	18
CLI Line-Editing Conventions	18
Using CLI Help	19
Accessing the CLI	20
2. Stacking Commands	21
Dedicated Port Stacking	21
Stacking Commands	29
Non-Stop Forwarding Commands	31
Stack Firmware Synchronization Commands	35
3. Switching Commands	38
Port Configuration Commands	39
Loopback Interface Commands	45
Spanning Tree Protocol (STP) Commands	47
VLAN Commands	64
Double VLAN Commands	77
Voice VLAN Commands	80
Provisioning (IEEE 802.1p) Commands	82
Protected Ports Commands	82
Private Group Commands	85
Private VLAN	86
GARP Commands	90
GVRP Commands	92
GMRP Commands	94
Port-Based Network Access Control Commands	96
802.1X Supplicant Commands	109
Storm-Control Commands	112
Flow Control Commands	122
Port-Channel/LAG (802.3ad) Commands	123
Port Mirroring	139
Static MAC Filtering	141
DHCP L2 Relay Agent Commands	145
DHCP Client Commands	149
DHCP Snooping Configuration Commands	150
Dynamic ARP Inspection Commands	159
IGMP Snooping Configuration Commands	166
IGMP Snooping Querier Commands	177
MLD Snooping Commands	180
MLD Snooping Querier Commands	187
set mld querier	187
set mld querier query_interval	188
set mld querier timer expiry	188
set mld querier election participate	189
show mldsnooping querier	189
Port Security Commands	190
LLDP (802.1AB) Commands	194
LLDP-MED Commands	203
Denial of Service Commands	212
MAC Database Commands	222
ISDP Commands	224
Priority-Based Flow Control Commands	229
4. Multicast VLAN Registration (MVR)	232
About MVR	232
MVR Commands	232
5. Routing Commands	240
Address Resolution Protocol (ARP) Commands	240
IP Routing Commands	246
Router Discovery Protocol Commands	263
Virtual LAN Routing Commands	266
Virtual Router Redundancy Protocol Commands	267
DHCP and BOOTP Relay Commands	276
IP Helper Commands	278
Open Shortest Path First (OSPF) Commands	282
OSPF Graceful Restart Commands	322
nsf	323
nsf restart-interval	323
nsf helper	324
nsf helper disable	325
nsf [ietf] helper strict-lsa-checking	325
OSPF Interface Flap Dampening Commands	327
Routing Information Protocol (RIP) Commands	329
ICMP Throttling Commands	336
6. IP Multicast Commands	339
Multicast Commands	339
DVMRP Commands	344
PIM Commands	349
Internet Group Message Protocol (IGMP) Commands	360
IGMP Proxy Commands	367
7. IPv6 Commands	373
Tunnel Interface Commands	373
IPv6 Routing Commands	375
OSPFv3 Commands	398
OSPFv3 Graceful Restart Commands	429
DHCPv6 Commands	431
8. IPv6 Multicast Commands	439
IPv6 Multicast Forwarder Commands	439
IPv6 PIM Commands	442
IPv6 MLD Commands	449
IPv6 MLD-Proxy Commands	455
9. Quality of Service (QoS) Commands	461
Class of Service (CoS) Commands	461
Differentiated Services (DiffServ) Commands	469
DiffServ Class Commands	470
DiffServ Policy Commands	479
DiffServ Service Commands	484
DiffServ Show Commands	485
MAC Access Control List (ACL) Commands	491
IP Access Control List (ACL) Commands	495
IPv6 Access Control List (ACL) Commands	502
Time Range Commands for Time-Based ACLs	506
AutoVOIP	508
iSCSI Commands	512
10. Power over Ethernet (PoE) Commands	518
About PoE	518
PoE Commands	519
11. Utility Commands	529
Auto Install Commands	530
Dual Image Commands	532
System Information and Statistics Commands	534
Logging Commands	550
Email Alerting and Mail Server Commands	556
System Utility and Clear Commands	562
Simple Network Time Protocol (SNTP) Commands	572
DHCP Server Commands	579
DNS Client Commands	591
Packet Capture Commands	595
Serviceability Packet Tracing Commands	598
Cable Test Command	617
sFlow Commands	617
Software License Commands	622
IP Address Conflict Commands	623
Link Local Protocol Filtering Commands	624
RMON Stats and History Commands	625
UDLD Commands	631
12. Management Commands	635
Configuring the Switch Management CPU	636
Network Interface Commands	638
Console Port Access Commands	641
Telnet Commands	643
Secure Shell (SSH) Commands	648
Management Security Commands	651
Hypertext Transfer Protocol (HTTP) Commands	652
Access Commands	659
User Account Commands	659
SNMP Commands	683
RADIUS Commands	694
TACACS+ Commands	706
Configuration Scripting Commands	711
Pre-Login Banner and System Prompt Commands	713
Switch Database Management (SDM) Templates	714
IPv6 Management Commands	716
13. Log Messages	721
Core	722
Utilities	724
Management	726
Switching	730
QoS	736
Routing/IPv6 Routing	737
Multicast	740
Stacking	742
Technologies	743
O/S Support	745
14. Captive Portal Commands	747
Captive Portal Global Commands	747
Captive Portal Configuration Commands	751
Captive Portal Status Commands	757
Captive Portal Client Connection Commands	761
Captive Portal Interface Commands	765
Captive Portal Local User Commands	766
Captive Portal User Group Commands	772

Match case Limit results 1 per page

Quality of Service (QoS) Commands

495

ProSafe Managed Switch

show mac access-lists

This command displays a MAC access list and all of the rules that are defined for the MAC

ACL. Use the

[name]

parameter to identify a specific MAC ACL to display.

Format

show mac access-lists

[name]

Mode

Rule Number

Action

Source MAC

Address

Destination

MAC Address

Ethertype

VLAN ID

COS

Log

Assign Queue

Mirror Interface

Redirect

Interface

Time Range

name

Rule Status

IP Access Control List (ACL) Commands

This section describes the commands you use to configure IP ACL settings. IP ACLs ensure

that only authorized users have access to specific resources and block any unwarranted

attempts to reach network resources.

The following rules apply to IP ACLs:

•

Managed switch software does not support IP ACL configuration for IP packet fragments.

•

The maximum number of ACLs you can create is hardware dependent. The limit applies

to all ACLs, regardless of type.

•

The maximum number of rules per IP ACL is hardware dependent.

•

Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is

in essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in

the bit positions that are used for the network address, and has zeros (0's) for the bit

Privileged EXEC

Term

Definition

The ordered rule number identifier defined within the MAC ACL.

The action associated with each rule. The possible values are Permit or Deny.

The source MAC address for this rule.

The destination MAC address for this rule.

The Ethertype keyword or custom value for this rule.

The VLAN identifier value or range for this rule.

The COS (802.1p) value for this rule.

Displays when you enable logging for the rule.

The queue identifier to which packets matching this rule are assigned.

The unit/slot/port to which packets matching this rule are copied.

The unit/slot/port to which packets matching this rule are forwarded.

Displays the name of the time-range if the MAC ACL rule has referenced a time range.

Status (Active/Inactive) of the MAC ACL rule