D-Link DGS-1510 Series - Page 57

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
54
Standard IP Access List:
[SEQUENCE-NUMBER] {permit | deny} {any | host SRC-IP-ADDR | SRC-IP-ADDR SRC-IP-
WILDCARD} [any | host DST-IP-ADDR | DST-IP-ADDR DST-IP-WILDCARD] [time-range
PROFILE-NAME]
no SEQUENCE-NUMBER
Parameters
SEQUENCE-NUMBER
Specifies the sequence number. The range is from 1 to 65535. The
lower the number is, the higher the priority of the permit/deny rule.
any
Specifies any source IP address or any destination IP address.
host SRC-IP-ADDR
Specifies a specific source host IP address.
SRC-IP-ADDR SRC-IP-
WILDCARD
Specifies a group of source IP addresses by using a wildcard
bitmap. The bit corresponding to the bit value 1 will be ignored. The
bit corresponding to the bit value 0 will be checked.
host DST-IP-ADDR
Specifies a specific destination host IP address.
DST-IP-ADDR DST-IP-
WILDCARD
Specifies a group of destination IP addresses by using a wildcard
bitmap. The bit corresponding to the bit value 1 will be ignored. The
bit corresponding to the bit value 0 will be checked.
precedence PRECEDENCE
(Optional) Specifies that packets can be filtered by precedence
level, as specified by a number from 0 to 7.
dscp DSCP
(Optional) Specifies the matching DSCP code in IP header. The
range is from 0 to 63, or select the following DSCP name: af11 -
001010, af12 -001100, af13 - 001110, af21 - 010010, af22 -
010100, af23 - 010110, af31 - 011010, af32 - 011100, af33 -
011110, af41 - 100010, af42 - 100100, af43 - 100110, cs1 - 001000,
cs2 - 010000, cs3 - 011000, cs4 - 100000, cs5 - 101000, cs6 -
110000, cs7 - 111000, default - 000000, ef – 101110.
tos TOS
(Optional) Specifies that packets can be filtered by type of service
level, as specified by a number from 0 to 15.
lt PORT
(Optional) Specifies to match if less than the specified port number.
gt PORT
(Optional) Specifies to match if greater than the specified port
number.
eq PORT
(Optional) Specifies to match if equal to the specified port number.
neq PORT
(Optional) Specifies to match if not equal to the specified port
number.
range MIN-PORT MAX-PORT
(Optional) Specifies to match if fall within the range of ports.
TCP-FLAG
(Optional) Specifies the TCP flag fields and the specified TCP
header bits called ack (acknowledge), fin (finish), psh (push), rst
(reset), syn (synchronize), or urg (urgent).
fragments
(Optional) Specifies the packet fragment’s filtering.
time-range PROFILE-NAME
(Optional) Specifies the name of the time period profile associated
with the access list delineating its activation period.
tcp, udp, igmp, ipinip, gre,
esp, eigrp, ospf, pcp, pim,
vrrp
Specifies Layer 4 protocols.
PROTOCOL-ID
(Optional) Specifies the protocol ID. The valid value is from 0 to
255.
ICMP-TYPE
(Optional) Specifies the ICMP message type. The valid number for
the message type is from 0 to 255.
ICMP-CODE
(Optional) Specifies the ICMP message code. The valid number for