VN/UN764:G LgvUvtgco" N4" Ocpcigf" Uykvej" ENK" Iwkfg
186
frag —— Enable/Disable Fragment. By default, it is disabled. If Fragment is
enabled, this rule will process all the fragments and the last piece of fragment
will be always forwarded.
Eqoocpf"Oqfg"
Global Configuration Mode
Gzcorng"
Create a Standard-IP ACL whose ID is 120, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the
packets match this rule will be forwarded by the switch:
VN/UN764:G*eqphki+%ceeguu/nkuv"etgcvg"120"
VN/UN764:G*eqphki+%cee guu/nkuv"uvcpfctf"120 twng"10 permit ukr 192.168.0.100
uocum 255.255.255.0 vug i tSeg1
ceeguu/nkuv"gzvgpfgf"
Fguetkrvkqp"
The ceeguu/nkuv"gzvgpfgf command is used to add Extended-IP ACL rule. To
delete the corresponding rule, please use pq"ceeguu/nkuv"gzvgpfgf command.
U{pvcz"
ceeguu/nkuv"gzvgpfgf"acl-id twng rule-id"{deny | permit} [ [ukr source-ip] uocum
source-ip-mask] [ [fkr destination-ip] focum destination-ip-mask] [vugi
time-segment] [htci {disable | enable}] [fuer dscp] [u/rqtv s-port] [f/rqtv d-port]
[verhnci tcpflag] [rtqvqeqn protocol] [keorv{rg icmptype] [keoreqfg icmpcode]
[vqu tos] [rtk pri]
pq"ceeguu/nkuv"gzvgpfgf acl-id twng rule-id
Rctcogvgt"
acl-id——The desired Extended-IP ACL for configuration.
rule-id —— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
source-ip —— The source IP address contained in the rule.
source-ip-mask —— The source IP address mask. It is required if you typed
the source IP address.
To Next Page
Loading...
