Netgear XSM4324FS CLI Manual Software Version 12.x - Page 965

M4300 Intelligent Edge Series Fully Managed Stackable Switches Redirect Interface 0/34 Committed Rate 32 Committed Burst Size 16 ACL hit count 0 IP Access Control List Commands This section describes the commands you use to configure IP Access Control List (ACL) settings. IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply to IP ACLs: • The maximum number of ACLs you can create is hardware dependent. The limit applies to all ACLs, regardless of type. • The maximum number of rules per IP ACL is hardware dependent. • If you configure a MAC ACL on an interface, you cannot configure an IP ACL on the same interface. • Wildcard masking for ACLs operates differently from a subnet mask. A wildcard mask is in essence the inverse of a subnet mask. With a subnet mask, the mask has ones (1's) in the bit positions that are used for the network address, and has zeros (0's) for the bit positions that are not used. In contrast, a wildcard mask has (0's) in a bit position that must be checked. A 1 in a bit position of the ACL mask indicates the corresponding bit can be ignored. access-list This command creates an IP Access Control List (ACL) that is identified by the access list number, which is 1-99 for standard ACLs or 100-199 for extended ACLs. The table with parameters and descriptions on page 966 describes the parameters for the access-list command. IP Standard ACL: Format Mode access-list 1-99 {remark comment} | {[sequence-number]}] {deny | permit} {every | srcip srcmask | host srcip} [time-range time-range-name] [log] [assign-queue queue-id] [{mirror | redirect} {unit/slot/port | lag lag-group-id}] [rate-limit rate burst-size] Global Config Quality of Service Commands 965 CLI Command Reference Manual