Unsolved
This post is more than 5 years old
4 Posts
0
21390
December 6th, 2013 11:00
PowerConnect 5500 - deleting ACE via CLI
Hello!
I'm working with MAC-based ACLs on a PowerConnect 5548 (firmware 4.1.0.15). Adding new ACE is easy enough:
console(config-mac-al)# permit 00:18:8b:c8:a9:f4 00:00:00:00:00:00 any
However, I can't seem to find a way to remove this ACE via the CLI. There doesn't seem to be any mention about this in the CLI guide. I tried a command that works on some of the Cisco switches that I have experience with:
console(config-mac-al)# no permit 00:18:8b:c8:a9:f4 00:00:00:00:00:00 any
% Unrecognized command
Currently I can only remove ACL entries via the web interface, but using CLI would be better in some situations.
No Events found!
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
December 6th, 2013 12:00
Instead of using a no permit command use deny 00:18:8b:c8:a9:f4 00:00:00:00:00:00 any
ToomasAas
4 Posts
0
December 7th, 2013 00:00
Thanks for the idea, Josh, but this doesn't quite achieve the goal.
I have a small test-ACL with just one entry:
console(config-mac-al)# permit 00:18:8b:c8:a9:f4 00:00:00:00:00:00 any
console# sh acce testacl
Extended MAC access list testacl
permit host 00:18:8b:c8:a9:f4 any
When I associate this ACL with an interface and it works as expected - incoming traffic from this MAC is passed, traffic from another MAC is blocked.
Then I modify the ACL as you suggested using the deny command. After that, the ACL looks like this:
console# sh acce testacl
Extended MAC access list testacl
permit host 00:18:8b:c8:a9:f4 any
deny host 00:18:8b:c8:a9:f4 any
When I associate this ACL with interface, traffic from the mentioned MAC is still passed. What I'm trying to achieve (and what works via the web interface) is that the 'permit' entry is removed from ACL and traffic from the mentioned MAC (any MAC that is not in the ACL) is dropped.
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
December 10th, 2013 08:00
I did some more research and it doesn’t look like there is a way to delete specific ACEs in the CLI, you have to copy the ACL to notepad, remove the ACL, make the changes in notepad and copy it back in as a new ACL. The GUI is just automating doing the copy, delete, edit, run of the commands.