Netgear XSM4324FS Software Administration Manual Software Version 12.x - Page 219

M4300 Series and M4300-96X Fully Managed Switches 3. Check the configuration using the show running-config command. (Netgear Switch) #show running-config ip access-list acl_voice remark "permit VOIP packets whose DSCP is EF" permit ip any any dscp ef remark "deny all of other packets" deny ip any any exit Change the Sequence of an ACL Rule The association of sequence numbers with access control list (ACL) rules can simplify the process of changing an ACL and can make it easier to identify the rules. Sequence numbers let you position ACL rule entries within an ACL, resort entries, and remove entries. You can renumber ACL rule entries to create room to insert a new rule entry. For example, you can specify a sequence number to insert a rule entry in the middle of an existing ACL. Each ACL rule entry requires a sequence number: If you do not assign a number manually, the switch assigns it automatically. The following applies to sequence numbers: • If you do not manually assign a sequence number for the rule, the switch automatically assign a sequence number that is 10 greater than the last sequence number in the ACL, and the rule is placed at the end of the list. If the rule is the first one in the ACL, a sequence number of 10 is assigned. If the automatically assigned sequence number exceeds the maximum possible value, creation of the ACL rule fails. • You cannot create a rule with a sequence number that duplicates an existing sequence number. • If you reboot the switch, the start sequence number and increment number for ACL rules are not saved. The following example shows how you can insert an ACL rule, let the switch automatically assign a sequence number, change the start sequence number and the sequence increment number (that is, the number by which the sequence increases), and insert an ACL rule at a particular position: 1. Create an IP ACL named voice_acl without specifying a sequence number. (Netgear Switch) #config (Netgear Switch) (Config)#ip access-list voice_acl (Netgear Switch) (Config-ipv4-acl)#permit ip any any dscp cs5 (Netgear Switch) (Config-ipv4-acl)#permit ip any any dscp ef (Netgear Switch) (Config-ipv4-acl)#deny ip any any (Netgear Switch) (Config-ipv4-acl)#exit ACLs 219 Software Administration Manual