CLI Guide

Layer 2 Switching Commands 291
User Guidelines
The administrator can use the remark keyword to add comments to ACL rule
entries belonging to an IPv4, IPv6, MAC or ARP ACL. Remarks are associated
with the ACL rule that is created immediately after the remarks are created.
When the ACL rule is removed, the associated remarks are also deleted.
Remarks are shown only in show running-config and are not displayed in
show ip access-lists.
The no remark command removes the first matching remark from an ACL
access-list. Repeated execution of this command with the same remark
comment removes the remark from the next ACL rule which associated with
the comment (if there is any rule configured with the same comment) or an
error message is displayed if there are no matching comments.
Command History
Updated in 6.3.0.1 firmware
Example
console(config)#arp access-list new
console(config-arp-access-list)#remark “test1”
console(config-arp-access-list)#permit ip host 1.1.1.1 mac host
00:01:02:03:04:05
console(config-arp-access-list)#remark “test1”
console(config-arp-access-list)#remark “test2”
console(config-arp-access-list)#remark “test3”
console(config-arp-access-list)#permit ip host 1.1.1.2 mac host
00:03:04:05:06:07
console(config-arp-access-list)#permit ip host 2.1.1.2 mac host
00:03:04:05:06:08
console(config-arp-access-list)#remark “test4”
console(config-arp-access-list)#remark “test5”
console(config-arp-access-list)#permit ip host 2.1.1.3 mac host
00:03:04:05:06:01
service-acl input
Use the service-acl input command in Interface Configuration mode to block
Link Local Protocol Filtering (LLPF) protocol(s) on a given port. Use the no
form of this command to unblock link-local protocol(s) on a given port.