Digitalchina Networks DCS-3950 series User Manual

253
DCS-3950 series Ethernet switch manual
Command Explanation
Standard IP ACL Mode
Exit
Exits name-based standard IP ACL
configuration mode
（4）Configuring an name-based extended IP access-list
a. Create an extended IP access-list basing on nomenclature
Command Explanation
Global Mode
ip access-list extended <name>
no ip access-list extended <name>
Creates an extended IP access-list
basing on nomenclature; the ‘no ip
access-list extended <name>
‘ command deletes the name-based
extended IP access-list
b. Specify multiple ‘permit’ or ‘deny’ rules
Command Explanation
Extended IP ACL Mode
[no] {deny | permit} icmp {{<sIpAddr>
<sMask>} | any-source | {host-source
<sIpAddr>}} {{<dIpAddr> <dMask>} |
any-destination | {host-destination
<dIpAddr>}} [<icmp-type>
[<icmp-code>]] [precedence <prec>]
[tos
<tos>][time-range<time-range-name>]
Creates an extended name-based ICMP
IP access rule; the ‘no’ form command
deletes this name-based extended IP
access rule
[no] {deny | permit} igmp {{<sIpAddr>
<sMask>} | any-source | {host-source
<sIpAddr>}} {{<dIpAddr> <dMask>} |
any-destination | {host-destination
<dIpAddr>}} [<igmp-type>]
[precedence <prec>] [tos
<tos>][time-range<time-range-name>]
Creates an extended name-based IGMP
IP access rule; the ‘no’ form command
deletes this name-based extended IP
access rule
[no] {deny | permit} tcp {{<sIpAddr>
<sMask>} | any-source | {host-source
<sIpAddr>}} [s-port <sPort>]
{{<dIpAddr> <dMask>} |
any-destination | {host-destination
<dIpAddr>}} [d-port <dPort>]
[ack+fin+psh+rst+urg+syn]
[precedence <prec>] [tos
<tos>][time-range<time-range-name>]
Creates an extended name-based TCP
IP access rule; the ‘no’ form command
deletes this name-based extended IP
access rule

Digitalchina Networks DCS-3950 series Specifications

General

Brand	Digitalchina Networks
Model	DCS-3950 series
Category	Network Router
Language	English