Ruijie RG-S29 Series User Manual

Command Reference ACL Commands
precedence
Packet precedence value (0 to 7)
range
The layer 4 port number range of the packet.
time-range tm-rng-name
Time range of packet filtering, named tm-rng-name
tos
Type of service (0 to 15)
cos
Class of service (0-7)
cos inner cos
COS of the packet tag
icmp-type
ICMP message type (0 to 255)
icmp-code
ICMP message type code (0 to 255)
icmp-message
ICMP message type name (0 to 255)
operator port[port]
Operator (lt-smaller, eq-equal, gt-greater, neq-unequal, range-range)
port indicates the port number. Dyadic operation needs two port numbers,
while other operators only need one port number
src-mac-addr
Physical address of the source host
dst-mac-addr
Physical address of the destination host
VID vid
VLAN ID
VID inner vid
VID of the tag
ethernet-type
Ethernet protocol type. 0x value can be entered.
match-all tcpf
Match all bits of the TCP flag.
established
Match the RST or ACK bit of the TCP flag.
text
Remark text
in
Filter the incoming packets of the interface
out
Filter the outgoing packets of the interface
{rule mask offset}
+
rule: Hexadecimal value field; mask: Hexadecimal mask field
offset: Refer to the offset table
“+” sign indicates at least one group
log
Output the matching syslog when the packet matches the ACL rule.
Letter
Meaning
Offset
Letter
Meaning
Offset
A
Destination MAC
0
O
TTL field
34
B
Source MAC
6
P
Protocol number
35
C
Data frame length field
12
Q
IP check sum
36
D
VLAN tag field
14
R
Source IP address
38
E
DSAP (Destination Service
Access Point) field
18
S
Destination IP address
42
F
SSAP (Source Service Access
Point) field
19
T
TCP source port
46
G
Ctrl field
20
U
TCP destination port
48

Ruijie RG-S29 Series Specifications

General

Brand	Ruijie
Model	RG-S29 Series
Category	Switch
Language	English