Owners manual

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
61
If a rule entry is created without a sequence number, a sequence number will be automatically assigned.
If it is the first entry, the sequence number 10 is assigned. A subsequent rule entry will be assigned a
sequence number that is 10 greater than the largest sequence number in that access list and is placed at
the end of the list.
The user can use the command access-list sequence to change the start sequence number and
increment number for the specified access list. After the command is applied, the new rule without
specified sequence number will be assigned sequence based new sequence setting of the specified
access list.
When you manually assign the sequence number, it is better to have a reserved interval for future lower
sequence number entries. Otherwise, it will create extra effort to insert an entry with a lower sequence
number.
The sequence number must be unique in the domain of an access-list. If you enter a sequence number
that is already present, an error message will be displayed.
Multiple entries can be added to the list, and you can use permit for one entry and use deny for the other
entry. Different permit and deny commands can match different fields available for setting.
Example
This example shows how to configure MAC access entries in the profile daily-profile to allow two sets of
source MAC addresses.
Switch# configure terminal
Switch(config)# mac access-list extended daily-profile
Switch(config-mac-ext-acl)# permit 00:80:33:00:00:00 00:00:00:ff:ff:ff any
Switch(config-mac-ext-acl)# permit 00:f4:57:00:00:00 00:00:00:ff:ff:ff any
Switch(config-mac-ext-acl)#
4-21 show access-group
This command is used to display access group information for interface(s).
show access-group [interface INTERFACE-ID]
Parameters
interface INTERFACE-ID
(Optional) Specifies the interface to be displayed.
Default
None.
Command Mode
EXEC Mode or Any Configuration Mode.
Command Default Level
Level: 1.
Usage Guideline
If interface is not specified, all of the interfaces that have access list configured will be displayed.
Example
This example shows how to display access lists that are applied to all of the interfaces.