Fortinet white logo
Fortinet white logo

CLI Reference

config switch-controller acl ingress

config switch-controller acl ingress

Configure ingress ACL policies to be applied on managed FortiSwitch ports.

config switch-controller acl ingress
    Description: Configure ingress ACL policies to be applied on managed FortiSwitch ports.
    edit <id>
        config action
            Description: ACL actions.
            set count [enable|disable]
            set drop [enable|disable]
        end
        config classifier
            Description: ACL classifiers.
            set dst-ip-prefix {ipv4-classnet}
            set dst-mac {mac-address}
            set src-ip-prefix {ipv4-classnet}
            set src-mac {mac-address}
            set vlan {integer}
        end
        set description {string}
    next
end

config switch-controller acl ingress

Parameter

Description

Type

Size

Default

description

Description for the ACL policy.

string

Maximum length: 63

id

ACL ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

config action

Parameter

Description

Type

Size

Default

count

Enable/disable count.

option

-

disable

Option

Description

enable

Enable count.

disable

Disable count.

drop

Enable/disable drop.

option

-

disable

Option

Description

enable

Enable drop.

disable

Disable drop.

config classifier

Parameter

Description

Type

Size

Default

dst-ip-prefix

Destination IP address to be matched.

ipv4-classnet

Not Specified

0.0.0.0 0.0.0.0

dst-mac

Destination MAC address to be matched.

mac-address

Not Specified

00:00:00:00:00:00

src-ip-prefix

Source IP address to be matched.

ipv4-classnet

Not Specified

0.0.0.0 0.0.0.0

src-mac

Source MAC address to be matched.

mac-address

Not Specified

00:00:00:00:00:00

vlan

VLAN ID to be matched.

integer

Minimum value: 1 Maximum value: 4094

0

config switch-controller acl ingress

config switch-controller acl ingress

Configure ingress ACL policies to be applied on managed FortiSwitch ports.

config switch-controller acl ingress
    Description: Configure ingress ACL policies to be applied on managed FortiSwitch ports.
    edit <id>
        config action
            Description: ACL actions.
            set count [enable|disable]
            set drop [enable|disable]
        end
        config classifier
            Description: ACL classifiers.
            set dst-ip-prefix {ipv4-classnet}
            set dst-mac {mac-address}
            set src-ip-prefix {ipv4-classnet}
            set src-mac {mac-address}
            set vlan {integer}
        end
        set description {string}
    next
end

config switch-controller acl ingress

Parameter

Description

Type

Size

Default

description

Description for the ACL policy.

string

Maximum length: 63

id

ACL ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

config action

Parameter

Description

Type

Size

Default

count

Enable/disable count.

option

-

disable

Option

Description

enable

Enable count.

disable

Disable count.

drop

Enable/disable drop.

option

-

disable

Option

Description

enable

Enable drop.

disable

Disable drop.

config classifier

Parameter

Description

Type

Size

Default

dst-ip-prefix

Destination IP address to be matched.

ipv4-classnet

Not Specified

0.0.0.0 0.0.0.0

dst-mac

Destination MAC address to be matched.

mac-address

Not Specified

00:00:00:00:00:00

src-ip-prefix

Source IP address to be matched.

ipv4-classnet

Not Specified

0.0.0.0 0.0.0.0

src-mac

Source MAC address to be matched.

mac-address

Not Specified

00:00:00:00:00:00

vlan

VLAN ID to be matched.

integer

Minimum value: 1 Maximum value: 4094

0