interface/{interface-type}/{interface-name}/ip/access-group

Resource URIs


URI	Description
<base_URI>/config/running/interface/{interface-type}/{interface-name}/ip/access-group	Configures IP access group. Valid interface types: Ethernet, Port-channel, Ve.

Parameters

ip-access-list: Specifies the ACL name.
ip-direction: Specifies the IP direction. Supported configurations are in and out. Configuring in sets the ACL binding direction as ingress. Configuring out sets the ACL binding direction as egress.
traffic-type: Specifies the type of traffic. The only supported configuration is routed. When configured, it enables IP ACL filtering only on routed traffic. This parameter is only supported when ACL is applied to the inbound traffic on an Layer 3 sub-interface such as the VE interface.

Usage Guidelines

GET, POST, PUT, PATCH, DELETE, OPTIONS, and HEAD operations are supported.

Note

IP access-list should be created before configuring interface/ip/access-group.

Examples

URI

The following example uses the GET option to retrieve the configuration details.

http://host:80/rest/config/running/interface/ethernet/%221/1%22/ip/access-group

None

<access-group xmlns="urn:brocade.com:mgmt:brocade-ip-access-list" y:self="/rest/config/running/interface/Ethernet/%221/1%22/
ip/access-group/acl%2Cin">
  <ip-access-list>acl</ip-access-list>
  <ip-direction>in</ip-direction>
</access-group>

URI

The following is an example of the POST operation to add an access-group with the traffic-type set to routed to a VE interface.

http://host:80/rest/config/running/interface/ve/%22100/ip/access-group

<access-group xmlns="urn:brocade.com:mgmt:brocade-ip-access-list" y:self="/rest/config/running/interface/ve/%221100/ip/access-group/acl%2Cin>
  <ip-access-list>acl8</ip-access-list>
  <ip-direction>in</ip-direction>
  <traffic-type>routed</traffic-type>
</access-group>

None

URI

The following is an example of the DELETE operation to remove the access- group configuration.

http://host:80/rest/config/running/interface/ethernet/%221/1%22/ip/access-group

None