User Guide
211
TENDA(config-mac-nacl)#rule 2 deny vlan 1 eth-type any src-mac aaaa.aaaa.aaaa src-mac-mask
any dst-mac any dst-mac-mask any
Note: Add rule 3 and deny all packets at the source MAC address of "aaaa.aaaa.aaa" to pass.
Note-------------------------------------------------------------------------------------------------------------------------
Deny: Deny packets matching rule to pass; vlan: Specify VID; eth-type: Specify protocol type;
src-mac: Specify source MAC address; dst-mac: Specify destination MAC address
If source MAC and destination MAC are set to Any, corresponding fields, such as mask field, will not
be configurable.
-------------------------------------------------------------------------------------------------------------------------------------
TENDA(config-mac-nacl)#rule <101-200> bind-with timerange <1-100>
Note: Configure MAC ACL rule and time range binding
Add IP based ACL rule
TENDA(config)# ip access-list extended 1
Note: Enter ACL 1
TENDA(config-ip-nacl)# rule 1 deny tcp src-ip any eq any dst-ip any eq any
Note: Add rule 1 and deny all TCP packets to pass
TENDA(config-ip-nacl)# rule 2 rate-limit 64 ip src-ip 192.168.10.1 src-ip-mask any dst-ip any
Note: Add rule 2 and set RX rate of packets with the source IP address of 192.168.10.1 to 64kbps
Note-------------------------------------------------------------------------------------------------------------------------
Deny: Deny packets matching rule to pass; IP: Specify protocol type; src-ip: Specify source IP
address; dst-ip: Specify destination IP address.
Source port and destination port are configurable only when you specify TCP and UDP as the
protocol type.
-------------------------------------------------------------------------------------------------------------------------------------
TENDA(config-mac-nacl)#rule <1-100> bind-with timerange <1-100>
Note: Configure IP ACL rule and time range binding
Delete ACL
TENDA(config)# no access-list 125
Note: Delete MAC based ACL: 125
TENDA(config)# no access-list 1
Note: Delete IP based ACL: 1
Delete an ACL rule
TENDA(config)# mac access-list 125
TENDA(config-mac-nacl)# no rule 1
To Next Page
Loading...
