Zte ZXR10 2900E Series - Page 98

ZXR102900ESeriesCongurationGuide
CommandFunction
zte(egress-extend-acl)#rule<1-500>{permit|deny}udp{<
source-ipaddr><sip-mask>|any}[ssourrce-porrtt<0-65535><
sport-mask>]{<destination-ipaddr><dip-mask>|any}[desstt-porrtt
<0-65535><dport-mask>][dsscp<0-63>][fragment]
SetsanextendedegressACLthat
matchesUDPpackets.
zte(egress-extend-acl)#rule<1-500>{permit|deny}arp{<
sender-ipaddr><sip-mask>|any}{<target-ipaddr><tip-mask>|any}
SetsanextendedegressACLthat
matchesARPpackets.
zte(cfg)#clearegress-aclextendnumber<500-599>ClearsanextendedegressACL
instance.
zte(cfg)#configegress-acllinknumber<600-699>Createsalayer-2egressACL
instanceandconguresit.
zte(egress-link-acl)#rule<1-500>{permit|deny}ip{[coss
<0-7>][<vlan-id>[<vlan-mask>]][<dest-mac><dmac-mask>|any]}
Setsalayer-2egressACLthat
matchesIPpackets.
zte(egress-link-acl)#rule<1-500>{permit|deny}arp{[coss
<0-7>][<vlan-id>[<vlan-mask>]][<dest-mac><dmac-mask>|any]}
Setsalayer-2egressACLthat
matchesARPpackets.
zte(egress-link-acl)#rule<1-500>{permit|deny}other
{[ether-type<1501-65535>|dsap-ssap<0-65535>][coss
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]}
Setsalayer-2egressACLthat
matchespacketsexceptIP/ARP
packets.
zte(egress-link-acl)#rule<1-500>{permit|deny}any
[<vlan-id>[<vlan-mask>]][cos<0-7>][<dest-mac><dmac-mask>|
any]
Setstherulethatalayer-2egress
ACLisusedtomatchpacketswith
speciedcos,VLANid,anddmac
ags.
zte(cfg)#clearegress-acllinknumber<600-699>Clearsalayer-2egressACL
instance.
zte(cfg)#configegress-aclhybridnumber<700-799>CreatesahybridegressACL
instanceandconguresit.
zte(egress-hybrid-acl)#rule<1-500>{permit|
deny}<ip-protocol>{<source-ipaddr><sip-mask>|any}{<
destination-ipaddr><dip-mask>|any}[dsscp<0-63>][fragment][
coss<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><
smac-mask>|any][<dest-mac><dmac-mask>|any]
SetsahybridegressACLthat
matchesspeciedeldsofIPv4
packets.
zte(egress-hybrid-acl)#rule<1-500>{permit|deny}ip{<
source-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|
any}[dsscp<0-63>][fragment][coss<0-7>][<vlan-id>[<
vlan-mask>]][<source-mac><smac-mask>|any][<dest-mac><
dmac-mask>|any]
SetsahybridegressACLthat
matchesIPv4packets.
5-50
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential