VN/UN764:G LgvUvtgco" N4" Ocpcigf" Uykvej" ENK" Iwkfg
187
destination-ip —— The destination IP address contained in the rule.
destination-ip-mask —— The destination IP address mask. It is required if you
typed the destination IP address.
time-segment —— The time-range for the rule to take effect. By default, it is
not limited.
frag —— Enable/Disable Fragment. By default, it is disabled. If Fragment is
enabled, this rule will process all the fragments and the last piece of fragment
will be always forwarded.
dscp —— Specify the dscp value, ranging from 0 to 63.
s-port —— The source port number.
d-port —— The destination port number.
tcpflag —— Specify the flag value when using TCP protocol.
protocol —— Configure the value of the matching protocol.
icmptype —— Configure the predefined ICMP type.
icmpcode —— Configure the predefined ICMP code.
tos—— Enter the IP ToS contained in the rule.
pri —— Enter the IP Precedence contained in the rule.
Eqoocpf"Oqfg"
Global Configuration Mode
Gzcorng"
Create an Extended-IP ACL whose ID is 220, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the
packets match this rule will be forwarded by the switch:
VN/UN764:G*eqphki+%ceeguu/nkuv"etgcvg"220"
VN/UN764:G*eqphki+%cee guu/nkuv"gzvgpfgf"220 twng"10 permit ukr 192.168.0.100
uocum 255.255.255.0 vug i tSeg1
ceeguu/nkuv"eqodkpgf"
Fguetkrvkqp"
The ceeguu/nkuv" eqodkpgf command is used to add combined ACL rule. To
delete the corresponding rule, please use pq"ceeguu/nkuv"eqodkpgf command.
To Next Page
Loading...
