251
d-port —— The destination port number.
time-segment —— The time-range for the rule to take effect. By default, it is not
limited.
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
User Guidelines
Before binding an IPv6 ACL to a VLAN or interface, you should configure the
SDM template as “enterpriseV6” and save your configurations. For more
information about SDM configuration, please refer to sdm prefer.
Example
Create an IPv6 ACL whose ID is 3600, and add Rule 10 for it. In the rule, the
source IP address is 3001::1, the source IP address mask is 255.255.255.0, the
time-range for the rule to take effect is “tSeg1”, and the packets match this rule
will be forwarded by the switch:
T2600G-28TS(config)# access-list create 3600
T2600G-28TS(config)# access-list ipv6 3600 rule 10 permit sip 3001::1
sip-mask ffff:ffff:ff00:00ff tseg tSeg1
33.12 rule
Description
The rule command is used to configure MAC ACL rule. To delete the
corresponding rule, please use no rule command.
Syntax
rule rule-id { deny | permit } [[ smac source-mac ] smask source-mac-mask ]
[[ dmac destination-mac ] dmask destination-mac-mask ] [ vid vlan-id ] [ type
ethernet-type ] [ pri user-pri ] [ tseg time-segment ]
no rule rule-id
Parameter
rule-id —— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
To Next Page
Loading...
