config switch-controller acl ingress
Configure ingress ACL policies to be applied on managed FortiSwitch ports.
config switch-controller acl ingress
Description: Configure ingress ACL policies to be applied on managed FortiSwitch ports.
edit <id>
config action
Description: ACL actions.
set count [enable|disable]
set drop [enable|disable]
end
config classifier
Description: ACL classifiers.
set dst-ip-prefix {ipv4-classnet}
set dst-mac {mac-address}
set src-ip-prefix {ipv4-classnet}
set src-mac {mac-address}
set vlan {integer}
end
set description {string}
next
end
config switch-controller acl ingress
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
description |
Description for the ACL policy. |
string |
Maximum length: 63 |
|
|
id |
ACL ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
config action
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
count |
Enable/disable count. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
drop |
Enable/disable drop. |
option |
- |
disable |
||||||
|
|
|
|||||||||
config classifier
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
dst-ip-prefix |
Destination IP address to be matched. |
ipv4-classnet |
Not Specified |
0.0.0.0 0.0.0.0 |
|
dst-mac |
Destination MAC address to be matched. |
mac-address |
Not Specified |
00:00:00:00:00:00 |
|
src-ip-prefix |
Source IP address to be matched. |
ipv4-classnet |
Not Specified |
0.0.0.0 0.0.0.0 |
|
src-mac |
Source MAC address to be matched. |
mac-address |
Not Specified |
00:00:00:00:00:00 |
|
vlan |
VLAN ID to be matched. |
integer |
Minimum value: 1 Maximum value: 4094 |
0 |