Step Description Command Keys
6 Set sender IP addresses for which the
rule should work (optional).
esr(config-acl-rule)# match
source-address { <ADDR> <MASK>
| any }
<ADDR> – sender IP address,
defined as AAA.BBB.CCC.DDD
where each part takes values of
[0..255];
<MASK> – IP address mask,
defined as AAA.BBB.CCC.DDD
where each part takes values of
[0..255]. Mask bits, set to zero,
specify IP address bits
excluded from the comparison
when searching.
When specifying the “any”
value, the rule will work for any
sender/recipient IP address.
7 Set destination IP addresses for which
the rule should work (optional).
esr(config-acl-rule)# match
destination-address { <ADDR>
<MASK> | any }
8 Set sender MAC addresses for which
the rule should work (optional).
esr(config-acl-rule)# match
source-mac <ADDR><WILDCARD>
<ADDR> – sender MAC
address, defined as
XX:XX:XX:XX:XX:XX where
each part takes the values of
[00..FF].
<WILDCARD> – MAC address
mask, defined as
XX:XX:XX:XX:XX:XX where
each part takes the values of
[00..FF]. Mask bits, set to zero,
specify MAC address bits
excluded from the comparison
when searching.
9 Set destination MAC addresses for
which the rule should work (optional).
esr(config-acl-rule)# match
destination-mac
<ADDR><WILDCARD>
10 Set the number of sender TCP/UDP
ports for which the rule should work (if
the protocol is specified).
esr(config-acl-rule)# match
source-port { <PORT> | any }
<PORT> – number of sender
TCP/UDP port, takes values of
[1..65535]. When specifying the
“any” value, the rule will work
for any sender TCP/UDP port.
11 Set the destination TCP/UDP ports
number for which the rule should work
(if the protocol is specified).
esr(config-acl-rule)# match
destination-port { <PORT> | any }
12 Set priority 802.1p value for which the
rule should work (optional).
esr(config-acl-rule)# match с os
<COS>
<COS> – priority 802.1p value,
takes values of [0..7].
13 Set DSCP code value for which the rule
should work (optional). Can not be used
with IP Precedence.
esr(config-acl-rule)# match dscp
<DSCP>
<DSCP> – DSCP code value,
takes values in the range of
[0..63].
14 Set IP Precedence code for which the
rule should work (optional). Can not be
used with DSCP.
esr(config-acl-rule)# match ip-
precedence <IPP>
<IPP> – IP Precedence code
value, takes values in the range
of [0..7].
To Next Page
Loading...
Need help?
General
