1.2.1 Command list

The following table lists the configuration commands used for filtering.

Table 1-7: List of configuration commands
Command name	Description
access-list	Sets an access list used as an IPv4 filter.
deny	Specifies the condition by which the filter discards access.
ip access-group	Applies an IPv4 filter to an Ethernet interface or VLAN interface and enables the IPv4 filter functionality.
ip access-list extended	Sets an access list used as an IPv4 packet filter.
ip access-list resequence	Re-sequences the sequence numbers that determine the order in which the IPv4 address filter and IPv4 packet filter apply filter conditions.
ip access-list standard	Configures an access list to serve as an IPv4 address filter.
ipv6 access-list	Configures an access list to serve as an IPv6 filter.
ipv6 access-list resequence	Re-sequences the sequence numbers that determine the order in which the IPv6 filter applies filter conditions.
ipv6 traffic-filter	Applies an IPv6 filter to an Ethernet interface or VLAN interface and enables the IPv6 filter functionality.
mac access-group	Applies a MAC filter to an Ethernet interface or VLAN interface and enables the MAC filter functionality.
mac access-list extended	Sets an access list to be used in a MAC filter.
mac access-list resequence	Resets the sequence number for the order in which the filter conditions in a MAC filter are applied.
permit	Specifies the condition by which the filter forwards access.
remark	Specifies supplementary information for the filter.
flow detection mode^#	Sets the flow-detection mode for filtering and QoS control.

#: See "Configuration Command Reference" and "27 Flow Detection Mode/Flow Operation".

The following table lists the operation commands used for filtering.

Table 1-8: List of operation commands
Command name	Description
show access-filter	Displays the statistical information of the access list (mac access-list,access-list,ip access-list,ipv6 access-list) set by the access group command (mac access-group,ip access-group,ipv6 traffic-filter).
clear access-filter	The statistical information of the access list (mac access-list,access-list,ip access-list,ipv6 access-list) set by the access group command (mac access-group,ip access-group,ipv6 traffic-filter) is cleared.