NQL configuration mode allows you to configure a Network Qualifier List (NQL). An NQL is a collection of subnet and host IP addresses that you can assign to an ACL clause, instead of creating a clause for each address. You can configure a maximum of 512 networks to an NQL, and a maximum of 512 NQLs on the CSS.
To access NQL configuration mode, use the nql command from any configuration mode except boot, group, header-field-group, RMON alarm, RMON event, and RMON history configuration modes. The prompt changes to (config-nql [name]). You can also use this command from NQL mode to access another NQL. For information about commands available in this mode, refer to the following commands.
In global configuration mode, use the no form of this command to delete an existing NQL.
nql nql_name (config) no nql existing_nql_name
Syntax Description
nql_name
The name of a new NQL you want to create or of an existing list. Enter an unquoted text string with no spaces and a maximum length of 31 characters. To see a list of existing NQL names, enter:
To provide a description for the network qualifier list (NQL), use the description command.
description "text"
Syntax Description
text
A description for the NQL. Enter a quoted text string with a maximum length of 63 characters.
(config-nql) ip address
To add an IP address to the list of networks supported by the NQL, use the ip address command. You can configure a maximum of 512 networks to an NQL. Use the no form of this command to remove an IP address from the NQL.
ip address ip_address[/subnet_prefix| subnet_address] {"description"}
{log} no ip address ip_address[/subnet_prefix|subnet_address]
Syntax Description
ip_address
The destination network prefix. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1).
subnet_prefix
The IP subnet mask prefix length in CIDR bitcount notation (for example, /24). The valid prefix length range is from 8 to 32.
subnet_address
The IP subnet mask IP address in dotted-decimal notation (for example, 255.255.255.0).
description
A description for the IP address. Enter a quoted text string with a maximum length of 63 characters.
log
Logs an event involving an NQL. You must also enable global NQL logging by using the (config)logging subsystem nql level debug-7 command. If you do not enter this option, the event is not logged.