access-group

interface-ge-config commands

Binds an EX3500 ACL to the selected port

When applied to the port, the ACL takes effect. Only one ACL can be bound to a port at a time. In case you bind a new ACL to a port with an existing ACL binding, the old binding is replaced with the new one.

Supported in the following platforms:

  • Switches — EX3524, EX3548
  • Wireless Controllers — RFS4000
  • Service Platforms — NX7500, NX7510, NX7520, NX7530, NX9500, NX9510, NX9600

Syntax

access-group [ex3500-ext-access-list|ex3500-std-access-list|mac-access-list] <ACL-NAME> in {time-range <TIME-RANGE-NAME>}

Parameters

access-group [ex3500-ext-access-list|ex3500-std-access-list|mac-access-list]  
<ACL-NAME> in {time-range <TIME-RANGE-NAME>}
access-group Binds a EX3500 ACL with this GE port. Select ACL type and specify the ACL name. The ACL should be existing and configured.
ex3500-ext-access-list <ACL-NAME> Binds an existing and configured EX3500 extended ACL
  • <ACL-NAME> – Specify the ACL name.
ex3500-std-access-list <ACL-NAME> Binds an existing and configured EX3500 standard ACL
  • <ACL-NAME> – Specify the ACL name.
mac-access-list <ACL-NAME> Binds an existing and configured EX3500 MAC ACL
  • <ACL-NAME> – Specify the MAC ACL name.
in Applies the specified ACL to all incoming packets
time-range <TIME-RANGE-NAME> Optional. Associates a EX3500 absolute or periodic time range with this access group. The specified ACL is bound to the port during the time period specified by the associated time range.
  • <TIME-RANGE-NAME> – Specify the time range name (should be existing and configured).

Example

nx9500-6C8809(config-profile-testEX3524-if-ge1-20)#access-group ex3500-ext-access-list EX3500_ACL_EXT_1 in time-range EX3500_TimeRange_01

nx9500-6C8809(config-profile-testEX3524-if-ge1-20)#show context
 interface ge 1 20
  access-group ex3500-ext-access-list EX3500_ACL_EXT_1 in time-range EX3500_TimeRange_01
nx9500-6C8809(config-profile-testEX3524-if-ge1-20)#

Related Commands

no Removes the GE port EX3500 ACL binding