Ruijie RG-S2900G-E Series - Page 781

Configuration Guide Access Control List Configuration
Command
Function
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# ip access-list standard id
Enter the ACL configuration mode.
Ruijie(config-std-nacl)# list-remark comment
Configure the list remark.
You can also execute the following commands to set the ACL remark:
Command
Function
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# access-list id list-remark
comment
Set the ACL remark.
The following example configures the ACL remark
Ruijie(config)#ip access-list standard 1
Ruijie(config-std-nacl)#remark ace_remark_permit_62_start
Ruijie(config-std-nacl)#permit 192.168.197.62 0.0.0.0
Ruijie(config-std-nacl)#remark ace_remark_permit_62_end
Ruijie(config-std-nacl)#list-remark acl_remark_foo
Ruijie(config-std-nacl)#end
Ruijie#write
Ruijie#show access-lists 1
ip access-list standard 1
remark ace_remark_permit_62_start
10 permit host 192.168.197.62
remark ace_remark_permit_62_end
list-remark acl_remark_foo
Ruijie#
Configuration Examples
Configuring Unidirectional TCP Connection
Configure TCP Flag filtering to enable unidirectional ACL.
Configuration Requirements
For the security of network A, the hosts in network A are allowed to originate the TCP connection
request to the hosts in network B. However, the hosts of network B are not allowed to originate the
TCP communication requests to network A.
Topology View