Digitalchina Networks DCS-3950 series User Manual

251
DCS-3950 series Ethernet switch manual
c) Exit MAC-IP Configuration Mode
2. Configuring the packet filtering function
(1) Enable global packet filtering function
(2) Configure default action.
3. Configuring time range function
(1) Create the name of the time range
(2) Configure periodic time range
(3) Configure absolute time range
4. Bind access-list to a specific direction of the specified port.
1. Configuring access-list
（1）Configuring a numbered standard IP access-list
Command Explanation
Global Mode
access-list <num> {deny | permit}
{{<sIpAddr> <sMask>} | any-source |
{host-source <sIpAddr>}}
no access-list <num>
Creates a numbered standard IP
access-list, if the access-list already
exists, then a rule will add to the current
access-list; the ‘no access-list
<num>‘ command deletes a numbered
standard IP access-list.
（2）Configuring a numbered extensive IP access-list
Command Explanation
Global Mode
access-list <num> {deny | permit}
icmp {{<sIpAddr> <sMask>} |
any-source | {host-source <sIpAddr>}}
{{<dIpAddr> <dMask>} |
any-destination | {host-destination
<dIpAddr>}} [<icmp-type>
[<icmp-code>]] [precedence <prec>]
[tos
<tos>][time-range<time-range-name>]
Creates a numbered ICMP extended IP
access rule; if the numbered extended
access-list of specified number does not
exist, then an access-list will be created
using this number.
access-list <num> {deny | permit}
igmp {{<sIpAddr> <sMask>} |
any-source | {host-source <sIpAddr>}}
{{<dIpAddr> <dMask>} |
any-destination | {host-destination
<dIpAddr>}} [<igmp-type>]
[precedence <prec>] [tos
<tos>][time-range<time-range-name>]
Creates a numbered IGMP extended IP
access rule; if the numbered extended
access-list of specified number does not
exist, then an access-list will be created
using this number.

Digitalchina Networks DCS-3950 series Specifications

General

Brand	Digitalchina Networks
Model	DCS-3950 series
Category	Network Router
Language	English