ELTEX ESR-10 - Page 475

ESR series service routers.ESR-Series. User manual
475
Step Description Command Keys
6 Set sender IP addresses for
which the rule should work
(optional).
esr(config-acl-rule)# match
source-address { <ADDR>
<MASK> | any }
<ADDR> – sender IP address,
defined as AAA.BBB.CCC.DDD where
each part takes values of [0..255];
<MASK> – IP address mask, defined
as AAA.BBB.CCC.DDD where each
part takes values of [0..255]. Mask
bits, set to zero, specify IP address
bits excluded from the comparison
when searching.
When specifying the 'any' value, the
rule will work for any sender/
recipient IP address.
7 Set destination IP addresses for
which the rule should work
(optional).
esr(config-acl-rule)# match
destination-address { <ADDR>
<MASK> | any }
8 Set sender MAC addresses for
which the rule should work
(optional).
esr(config-acl-rule)# match
source-mac
<ADDR><WILDCARD>
<ADDR> – sender MAC address,
defined as XX:XX:XX:XX:XX:XX
where each part takes the values of
[00..FF].
<WILDCARD> – MAC address mask,
defined as XX:XX:XX:XX:XX:XX
where each part takes the values of
[00..FF]. Mask bits, set to zero,
specify MAC address bits excluded
from the comparison when
searching.
9 Set destination MAC addresses
for which the rule should work
(optional).
esr(config-acl-rule)# match
destination-mac
<ADDR><WILDCARD>
10 Set the number of sender TCP/
UDP ports for which the rule
should work (if the protocol is
specified).
esr(config-acl-rule)# match
source-port { <PORT> | any }
<PORT> – number of sender TCP/
UDP port, takes values of [1..65535].
When specifying the 'any' value, the
rule will work for any sender TCP/
UDP port.
11 Set the destination TCP/UDP
ports number for which the rule
should work (if the protocol is
specified).
esr(config-acl-rule)# match
destination-port { <PORT> | any }
12 Set priority 802.1p value for which
the rule should work (optional).
esr(config-acl-rule)# match с os
<COS>
<COS> – priority 802.1p value, takes
values of [0..7].
13 Set DSCP code value for which
the rule should work (optional).
Can not be used with IP
Precedence.
esr(config-acl-rule)# match dscp
<DSCP>
<DSCP> – DSCP code value, takes
values in the range of [0..63].
14 Set IP Precedence code for which
the rule should work (optional).
Can not be used with DSCP.
esr(config-acl-rule)# match ip-
precedence <IPP>
<IPP> – IP Precedence code value,
takes values in the range of [0..7].