Digitalchina Networks DCS-3950 series User Manual

264
DCS-3950 series Ethernet switch manual
{ip|mac|mac-ip} access-group
<acl-name> {in|out}
no {ip|mac|mac-ip} access-group
<acl-name> {in|out}
Applies an access-list to the specified
direction on the port; the ‘no
{ip|mac|mac-ip} access-group
<acl-name> {in|out}’ command deletes
the access-list bound to the port.
5. Clear the filtering information of the specificed port
Command Notes
Admin Mode
clear access-group statistic
[ethernet<interface-name>]
Clear statistics of the specified interface.
15.3.2 ACLCommand List
15.3.2.1 access-list(ip extended)
Command: access-list <num> {deny|permit} icmp {{<sIpAddr>
<sMask>}|any-source| {host-source <sIpAddr>}} {{<dIpAddr>
<dMask>}|any-destination| {host-destination <dIpAddr>}}
[<icmp-type> [<icmp-code>]] [precedence <prec>] [tos <tos>]
[time-range <time-range-name>]
access-list <num> {deny|permit} igmp {{<sIpAddr>
<sMask>}|any-source| {host-source <sIpAddr>}} {{<dIpAddr>
<dMask>}|any-destination| {host-destination <dIpAddr>}}
[<igmp-type>] [precedence <prec>] [tos <tos>] [time-range
<time-range-name>]
access-list <num> {deny|permit} tcp {{<sIpAddr>
<sMask>}|any-source| {host-source <sIpAddr>}} [s-port <sPort>]
{{<dIpAddr> <dMask>}|any-destination| {host-destination <dIpAddr>}}
[d-port <dPort>] [ack+ fin+ psh+ rst+ urg+ syn] [precedence <prec>]
[tos <tos>] [time-range <time-range-name>]
access-list <num> {deny|permit} udp {{<sIpAddr>
<sMask>}|any-source| {host-source <sIpAddr>}} [s-port <sPort>]
{{<dIpAddr> <dMask>}|any-destination| {host-destination <dIpAddr>}}
[d-port <dPort>
] [precedence <prec>] [tos <tos>] [time-range
<time-range-name>]
access-list <num> {deny|permit} {eigrp|gre|igrp|ipinip|ip|<int>}
{{<sIpAddr> <sMask>}|any-source|{host-source <sIpAddr>}}
{{<dIpAddr> <dMask>}| any-destination|{host-destination <dIpAddr>}}
[precedence <prec>] [tos <tos>] [time-range <time-range-name>]
no access-list <num>
Functions: Create a numeric expansion IP access rule to match specific IP protocol or all
IP protocol; if access-list of this coded numeric expansion does not exist, thus to create

Digitalchina Networks DCS-3950 series Specifications

General

Brand	Digitalchina Networks
Model	DCS-3950 series
Category	Network Router
Language	English