filter acl set

Syntax

• default filter acl set <acl-id> default-action

• default filter acl set <acl-id> global-action

• default filter acl set <acl-id> global-action monitor-dst-mlt

• default filter acl set <acl-id> global-action monitor-dst-ports

• filter acl set <acl-id> default-action deny

• filter acl set <acl-id> default-action deny control-packet-action deny

• filter acl set <acl-id> default-action deny control-packet-action permit

• filter acl set <acl-id> default-action permit

• filter acl set <acl-id> global-action monitor-dst-mlt <1-512>

• filter acl set <acl-id> global-action monitor-dst-ports{slot/port[/sub-port][-slot/port[/sub-port]][,...]}

• no filter acl set <acl-id> global-action monitor-dst-mlt

• no filter acl set <acl-id> global-action monitor-dst-ports

Command Parameters

{slot/port[/sub-port] [-slot/port[/sub-port]] [,...]}

Identifies the slot and port in one of the following formats: a single slot and port (slot/port), a range of slots and ports (slot/port-slot/port), or a series of slots and ports (slot/port,slot/port,slot/port). If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

<acl-id>

Specifies the ACL ID. Use the CLI Help to see the available range for the switch.

default-action <permit|deny>

Specifies the action to be taken when none of the access control entries (ACEs) match. The options are deny or permit.

global-action {monitor-dst-mlt<1-512>|monitor-dst-ports}

Specifies the action to be taken for all access control entry (ACE) matches. The options are: monitor-dst-mlt <1-512>|

monitor-dst-ports {slot/port[/sub-port][-slot/port[/sub-port]][,...]}.

Default

The default action is deny.

Command Mode

Global Configuration