Chapter4ServiceConguration
ParameterDescription
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
IPThisruleisonlyvalidforIPpacket.Otherpacketsignorethisrule.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskandusedforsource.Itis32-bitIPaddress
expressedindotteddecimalnotation.
any(rst)
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itis32-bit
IPaddressexpressedindotteddecimalnotation.
<dip-mask>
Destinationmaskusedfordestination.Itis32-bitIPaddress
expressedindotteddecimalnotation.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0.
dscp<0-63>
ThisruleisonlyvalidforthemessagewiththespeciedDSCP
value.Ignorethisruleforothermessages.TherangeofDSCP
valueis0to63.
fragment
Thisruleisonlyvalidforfragmentmessages.Fornon-fragment
messages,thisruleisignored.
cos<0-7>
Thisruleisonlyvalidforthecos-speciedmessage.Ignorethis
ruleforothermessages.Therangeofcosis0to7.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
<vlan-mask>OptionalVLANmask.Thedefaultvalueis0xfff.
<source-mac>SourceMACaddressofthetransmittedpacket.
<smac-mask>SourceMACmask.
any(third)
TheanykeywordisusedastheabbreviationofsourceMAC
address00.00.00.00.00.00andmask00.00.00.00.00.00.
<dest-mac>DestinationMACaddressofthetransmittedpacket.
<dmac-mask>DestinationMACaddressofthetransmittedpacket.
any(fourth)
Theanykeywordisusedastheabbreviationofthedestination
MACaddress00.00.00.00.00.00andmask00.00.00.00.00.00.
4-279
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential