Reference Guide

The following shows an example of the command.
(Extreme 220) (Config) (Config)#ip access-list ip1
(Extreme 220) (Config-ipv4-acl)#permit icmp any any rate-limit 32 16
(Extreme 220) (Config-ipv4-acl)#exit
no sequence-number
Use this command to remove the ACL
rule with the specified sequence number from the ACL.
Format no sequence-number
Mode Ipv4-Access-List Config
ip access-group
This command either attaches a specific IP ACL identified by accesslistnumber or name to an interface
(including VLAN routing interfaces), range of interfaces, or all interfaces; or associates it with a VLAN ID
in a given direction. The parameter name is the name of the Access Control List.
An optional sequence number may be specified to indicate the order of this IP access list relative to
other IP access lists already assigned to this interface and direction. A lower number indicates higher
precedence order. If a sequence number is already in use for this interface and direction, the specified
access list replaces the currently attached IP access list using that sequence number. If the sequence
number is not specified for this command, a sequence number that is one greater than the highest
sequence number currently in use for this interface and direction is used.
An optional control-plane is specified to apply the ACL on CPU port. The IPv4 control packets like
RADIUS and TACACS+ are also dropped because of the implicit deny all rule added at the end of the
list. To overcome this, permit rules must be added to allow the IPv4 control packets.
Note
The keyword control-plane is only available in Global Config mode.
Note
You should be aware that the out option may or may not be available, depending on the
platform.
Default none
Format ip access-group {accesslistnumber|name} {{control-plane|in|
out}|vlan vlan-id {in|out}} [sequence 1-4294967295]
Modes
•
Interface Config
•
Global Config
Quality of Service Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 636