258
DCS-3950 series Ethernet switch manual
access-list<num>{deny|permit}{any-s
ource-mac|
{host-source-mac<host_smac>}|{<sm
ac><smac-mask>}}{any-destination-m
ac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}
}tcp
{{<source><source-wildcard>}|any-so
urce|
{host-source<source-host-ip>}}[s-port
<port1>]
{{<destination><destination-wildcard>
}|any-destination| {host-destination
<destination-host-ip>}} [d-port
<port3>] [ack+fin+psh+rst+urg+syn]
[precedence <precedence>] [tos
<tos>][time-range<time-range-name>]
Creates a numbered extended mac-tcp
access rule for other specific mac-tcp
protocol or all mac-tcp protocols; if the
numbered extended access-list of
specified number
access-list<num>{deny|permit}{any-s
ource-mac|
{host-source-mac<host_smac>}|{<sm
ac><smac-mask>}}{any-destination-m
ac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}
}udp
{{<source><source-wildcard>}|any-so
urce|
{host-source<source-host-ip>}}[s-port
<port1>]
{{<destination><destination-wildcard>
}|any-destination|
{host-destination<destination-host-ip>
}} [d-port <port3>] [precedence
<precedence>] [tos
<tos>][time-range<time-range-name>]
Creates a numbered extended mac-ip
access rule for other specific mac-ip
protocol or all mac-ip protocols; if the
numbered extended access-list of
specified number does not exist, then an
access-list will be created using this
number.