246
33.8 access-list standard
Description
The access-list standard command is used to add Standard-IP ACL rule. To
delete the corresponding rule, please use no access-list standard command.
Standard-IP ACLs analyze and process data packets based on a series of
match conditions, which can be the source IP addresses and destination IP
addresses carried in the packets.
Syntax
access-list standard acl-id rule rule-id { deny | permit } [[ sip source-ip ] smask
source-ip-mask] [[ dip destination-ip ] dmask destination-ip-mask ] [ tseg
time-segment ]
no access-list standard acl-id rule rule-id
Parameter
acl-id —— The desired Standard-IP ACL for configuration.
rule-id —— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
source-ip —— The source IP address contained in the rule.
source-ip-mask —— The source IP address mask. It is required if you typed the
source IP address.
destination-ip —— The destination IP address contained in the rule.
destination-ip-mask —— The destination IP address mask. It is required if you
typed the destination IP address.
time-segment —— The time-range for the rule to take effect. By default, it is not
limited.
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Create a Standard-IP ACL whose ID is 520, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is “tRange1”, and the
packets match this rule will be forwarded by the switch:
To Next Page
Loading...
