Edit

Provides options to edit Access Control List (ACL) profiles.

Note: * = required parameter, + select one parameter from list

• Command path - profile>acl
• Object - acl
• Actions -
  • edit - ACL profiles 
    • *name= - ACL profile name
    • rule=  - add or remove a rule (remove using 'no rule')
      • action=  - rule action
        • deny|permit|sr-tcm|tr-tcm
      • +append  - add rule to the end of the list
      • +basic  - specifies basic rule type
      • +extended  - specifies extended rule type
      • identifier  - rule identifier, name of the identifier must be unique within set of rules; there can be up to 8 rules per profile
      • +insert-BEFORE  - add a new rule at X is the index
      • l2  - layer 2 information
        • Destination-mAc - destination MAC address value (for specified)
        • EtherType=  - ether type
          • dynamic values: IPv4 | IPv6 | arp | 32768-65535
        • flags= - layer 2 flags information
          • Data-Link-Flooding - data link layer flooding
        • max-macs=  - maximum number of source MACs
          • 1 - 8
        • pbit = - 802.1p Priority
          • pbit-0 | pbit-1 | pbit-2 | pbit-3 | pbit-4 | pbit -5 | pbit-6 | pbit-7
        • Source-mAc=  - source MAC address value (for specified), or type (for wildcard)
          • valid mac | any | authorized | garp | sticky 
      • l3  - layer 3 information
        • Destination-IP (da)=  - IP address of the intended receiver (for specified)
          •  valid IPv4 | IPv6 address
        • Differentiated-Services-Code-Point (dscp)=  - differentiated services code point
          • 0 - 63
        • flags  - layer 3 IP flags information
          • Donot-Fragment (df)=  - controls the fragmentation of the datagram
            • set | clear | ignore
          • More-Fragments (mf)=  - indicates if the datagram contains additional fragments
            • set | clear | ignore
        • protocol=  - specifies the next encapsulated protocol
          • icmp=1 | tcp=6 | udp=17 | 0-255
        • Time-To-Live (tll)= - a timer field used to track the lifetime of the datagram
          • 0-255
        • Type-Of-Service (tos)=  - specifies the parameters for the type of service requested
          • routine | priority | immediate | flash | flash-override | critic-ecp | internetwork-control | network-control
      • meter  - meter information
      • number= - change an existing rule where X is the index
         

1. From the ESUx> command line, input profile acl edit name=TellabsCliTest rule basic number=1 l2 max-macs=1, and press Enter. Output similar to the following is displayed:

   ESUx> profile acl edit name=TellabsCliTest rule basic number=1 l2 max-macs=1 <enter> success ESUx> _

Previous  |  Next