Adds rules and configures the rule precedence list for an access-list.
access-list | Configures access-list rule model. |
rule-precedence | Specifies modifying a rule's precedence in the access-list. |
list_dot_rule | Specifies the access-list name and rule name in the format list_name.rule_name. |
after | Moves the rule after an existing entry. |
before | Moves the rule before an existing entry. |
member_rule | Specifies the access-list name and rule name in format list_name.rule_name. |
first | Makes the rule the first. |
last | Makes the rule the last. |
N/A.
An access-list always contains at least one rule and is not active or programmed until it is assigned to a profile. Assigning a different profile ID to an access-list that already has one overwrites the current value. Setting the profile ID to “none” removes the access-list from the active/programmed rules. A profile ID can only be assigned to an access-list, and not per rule, so the list_name must only contain an access-list and not a list_dot_rule value.
The following example places the access-list "ACL1.ace3" before "ACL1.ace1":
# configure policy access-list rule-precedence ACL1.ace3 before ACL1.ace1
This command was first available in ExtremeXOS 30.5.
This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, and X695 series switches.