MES3000 Ethernet switch series 199
EXEC Mode Commands
Command line in the EXEC mode appears as follows:
console#
Table 5.245 ACL display commands
show time-range
time_name
time name: (1...32)
characters
Displays time-range configuration.
5.29.1 IPv4 ACL configuration
The section provides values and description of main parameters which are used in IPv4 ACL
configuration commands. In order to create an IPv4 ACL and enter its configuration mode, use the
following command: ip access-list extended access-list. For example, to create the EltexAL
ACL, the following commands should be executed:
console#
console# configure
console(config)# ip access-list extended EltexAL
console(config-ip-al)#
Table 5.246 Main parameters of commands
Creates a permitting filtration rule in ACL.
Creates a denying filtration rule in ACL.
The field is used to specify a protocol (or all protocols)
filtration will be based on. The following protocol options are
available: arp, icmp, igmp, ip, tcp, egp, igp, udp, hmp, rdp,
idpr, ipv6, ipv6:rout, ipv6:frag, idrp, rsvp, gre, esp, ah,
ipv6:icmp, eigrp, ospf, ipinip, pim, l2tp, isis, ipip or a protocol
number (0–255).
The ip value is used for all protocols to establish
correspondence.
Defines address of the packet source.
Address mask of the source
A bit mask applied to IP address of the packet source. The
mask defines the bits of the IP address which should be
ignored. "1" should be written to all ignored bites. For
example, the mask can be used to define an IP network for a
filtration rule. In order to add 195.165.0.0 IP network to a
filtration rule, the mask should be set to 0.0.255.255, i. e. the
last 16 bits of IP address will be ignored according to the mask.
Defines address of the packet destination.
Address mask of the
destination
A bit mask applied to IP address of the packet destination. The
mask defines the bits of the IP address which should be
ignored. "1" should be written to all ignored bites. The mask is
used the same way as the source_wildcard mask.
Define VLAN for which the rule will be applied
The DSCP field in L3 header
Defines the value of the diffserv DSCP field. Possible message
codes of the dscp field: (0–63).
Defines the priority of IP traffic: (0–7).
Name of the time-range
configuration profile
Defines configuration of time periods.