Ruijie RG-S29 Series User Manual

Command Reference ACL Commands
H
Org Code field
21
V
Sequence number
50
I
Encapsulated data type
24
W
Confirmation field
54
J
IP version number
26
XY
IP header length and
reserved bits
58
K
TOS field
27
Z
Resrved bits and flags bit
59
L
Length of IP packet
28
a
Windows size field
60
M
ID
30
b
Others
62
N
Flags field
32
The offsets of fields in the above table are their offsets in 802.3 data frames of SNAP+tag.
1.2 access-list
Use this command to create an access list to filter data packets. Use the no form of this command to
remove the specified access list.
1. Standard IP access list (1 to 99, 1300 to 1999)
access-list id { deny | permit } { source source-wildcard | host source | any | interface idx }
[time-range tm-range-name ] [ log ]
2. Extended IP access list (100 to 199, 2000 to 2699)
access-list id {deny | permit} protocol {source source-wildcard | host source | any| interface idx }
{destination destination-wildcard | host destination | any} [precedence precedence] [tos tos]
[fragment] [range lower upper] [time-range time-range-name] [ log ]
3. Extended MAC access list (700 to 799)
access-list id {deny | permit} {any | host source-mac-address | source-mac-address mask } {any |
host destination-mac-address | destination-mac-address mask } [ethernet-type][cos [out][ inner in]]
4. Extended expert access list (2700 to 2899)
access-list id {deny | permit} [protocol | [ethernet-type][ cos [out][ inner in]]] [VID [out][inner in]]
{source source-wildcard | host source | any} {host source-mac-address | any} {destination
destination-wildcard | host destination | any} {host destination-mac-address | any} ][precedence
precedence] [tos tos] [fragment] [time-range time-range-name]
 When you select the Ethernet-type field or cos field:
access-list id {deny | permit} {ethernet-type| cos [out][ inner in]} [VID [out][inner in]] {source
source-wildcard | host source | any} {host source-mac-address | any } {destination
destination-wildcard | host destination | any} {host destination-mac-address | any} [time-range
time-range-name]
 When you select the protocol field:
access-list id {deny | permit} protocol [VID [out][inner in]] {source source-wildcard | host source |
any} {host source-mac-address | any }{destination destination-wildcard | host destination | any}
{host destination-mac-address | any} [precedence precedence] [tos tos] [fragment] [range lower
upper] [time-range time-range-name]
 Extended expert ACLs of some important protocols:
Internet Control Message Protocol (ICMP)
access-list id {deny | permit} icmp [VID [out][inner in]] {source source-wildcard | host source | any}
{host source-mac-address | any } {destination destination-wildcard | host destination | any} {host

Ruijie RG-S29 Series Specifications

General

Brand	Ruijie
Model	RG-S29 Series
Category	Switch
Language	English