@@ -21,17 +21,17 @@ To create an ACL and define its properties, you can utilize the `az networkfabri
21
21
22
22
1 . ** Set subscription (if necessary):**
23
23
24
- If you have multiple subscriptions and need to set one as the default, you can do so with:
24
+ If you have multiple subscriptions and need to set one as the default, you can do so with:
25
25
26
- ``` bash
27
- az account set --subscription < subscription-id>
28
- ```
26
+ ``` bash
27
+ az account set --subscription < subscription-id>
28
+ ```
29
29
30
30
2 . ** Create ACL:**
31
31
32
- ``` bash
32
+ ``` bash
33
33
az networkfabric acl create --resource-group " <resource-group>" --location " <location>" --resource-name " <acl-name>" --annotation " <annotation>" --configuration-type " <configuration-type>" --default-action " <default-action>" --match-configurations " [{matchConfigurationName:<match-config-name>,sequenceNumber:<sequence-number>,ipAddressType:<IPv4/IPv6>,matchConditions:[{ipCondition:{type:<SourceIP/DestinationIP>,prefixType:<Prefix/Exact>,ipPrefixValues:['<ip-prefix1>', '<ip-prefix2>', ...]}}],actions:[{type:<Action>}]}]"
34
- ```
34
+ ```
35
35
36
36
| Parameter | Description |
37
37
| ----------------------| ----------------------------------------------------------------------|
@@ -70,12 +70,12 @@ The table below provides guidance on the usage of parameters when creating ACLs:
70
70
| configuration-type | Configuration type (inline or file) | Example: inline |
71
71
72
72
> [ !NOTE]
73
- > Inline ports and inline VLANs are statically defined using azcli.< br>
74
- > PortGroupNames and VlanGroupNames are dynamically defined.< br>
75
- > Combining inline ports with portGroupNames is not allowed, similarly for inline VLANs and VLANGroupNames.< br>
76
- > IPGroupNames and IpPrefixValues cannot be combined.< br>
77
- > Egress ACLs do not support certain options like IP options, IP length, fragment, ether-type, DSCP marking, and TTL values.< br>
78
- > Ingress ACLs do not support the following options: etherType.< br>
73
+ > - Inline ports and inline VLANs are statically defined using azcli.<br >
74
+ > - PortGroupNames and VlanGroupNames are dynamically defined.<br >
75
+ > - Combining inline ports with portGroupNames is not allowed, similarly for inline VLANs and VLANGroupNames.<br >
76
+ > - IPGroupNames and IpPrefixValues cannot be combined.<br >
77
+ > - Egress ACLs do not support certain options like IP options, IP length, fragment, ether-type, DSCP marking, and TTL values.<br >
78
+ > - Ingress ACLs do not support the following options: etherType.<br >
79
79
80
80
### Example payload for ACL creation
81
81
0 commit comments