Dahua DH-PFS6428-24T - Rule; IP;MAC Access-Group

6.4.3 rule
Command Description
rule <1-127> deny/permit <source mac> <destination mac> cos
<0-7>/vlan <1-4094>/eth_type ETHTYPE
rule <1-127> deny/permit icmp/igmp/tcp/udp/ip <source ip>
<destination ip> ip_pri<0-7> / tos_pri<0-15>/ dscp_pri<0-63>
//This command is used to add an ACL ACE entry.
no rulel <1-127>
//This command is used to delete an ACL ACE entry.
Parameter
Parameter
Parameters of the command mode
<1-127>
Rule number, range: 1-127
source mac
Source MAC address
destination mac
Destination MAC address,
1-4094
Vlan-id,range:1-4094
ETHTYPE
Ethernet type, range: 0x0000-0xFFFF;
0x0000 or do not fill in the representation
does not match the Ethernet type field,
source ip
Source IP address
destination ip
Destination IP address,
<0-7>
Match the IP priority, range 0-7
<0-15>
Match the TOS, range 0-15
<0-63>
Match the DSCP, range 0-63
Default
None
Command Mode
Global configuration mode
Example
//This command is used to add a Mac - acl rules.
switch(config)#mac acl 1
switch(config-acl-mac)#rule 1 deny any any
6.4.4 ip/mac access-group
Command Description
ip access-group <100-999>
no ip access-group <100-999>
mac access-group <1-99>
no mac access-group <1-99>
//Using this command, you can bind the port to use the ACL rule.
Parameter