Netgear XCM8806 Chassis Hardware Installation Guide - Page 491

NETGEAR 8800 Chassis Switch CLI Manual Usage Guidelines The dynamic rule must first be created before it can be applied to an interface. Use the following command to create a dynamic rule: create access-list {non-permanent} When a dynamic ACL rule is applied to an interface, you will specify its precedence among any previously applied dynamic ACLs. All dynamic ACLs have a higher precedence than any ACLs applied through ACL policy files. Specifying the keyword any applies the ACL to all the ports, and is referred to as the wildcard ACL. This ACL is evaluated for ports without a specific ACL applied to them, and is also applied to packets that do not match the ACL applied to the interface. The priority keyword can be used to specify a sub-zone within an application's space. For example, to place ACLs into three sub-zones within the CLI application, you can use three priority numbers, such as 2, 4, and 7. Configuring priority number 1 is the same as configuring first priority. Configuring priority number 8 is the same as configuring last priority. Example The following command applies the dynamic ACL icmp-echo as the first (highest precedence) dynamic ACL to port 1:2 at ingress: configure access-list add icmp-echo first ports 1:2 The following command applies the dynamic ACL udpdacl to port 1:2, with a higher precedence than rule icmp-echo: configure access-list add udpacl before icmp-echo ports 1:2 configure access-list delete configure access-list delete [ any | vlan | ports | all] {ingress | egress} Description Removes a dynamic ACL rule from the specified interface. Syntax Description ruleName any vlanname portlist all ingress Specifies a dynamic ACL rule name. Deletes this ACL as the wildcard ACL. Specifies the VLAN on which this ACL is deleted. Specifies the ports on which this ACL is deleted. Deletes this ACL from all interfaces. Deletes the ACL for packets entering the switch on this interface. Chapter 13. ACL Commands | 491