Zte ZXR10 2928E-PS

ZXR102900ESeriesCongurationGuide
CommandFunction
zte(extend-acl-group)#rule<1-500>{permit|deny}<ip-protocol>{<sour
ce-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|any}[dscp
<0-63>][fragment]
Setstherulethatanextendedingress
ACLmatchesIPv4–speciedprotocol
eldpacket.
zte(extend-acl-group)#rule<1-500>{permit|deny}icmp
{<source-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|
any}[icmp-type<0-254><icmp-code>][dscp<0-63>][fragment]
Setstherulethatanextendedingress
ACLisusedtomatchICMPpacket.
zte(extend-acl-group)#rule<1-500>{permit|deny}ip{<source-ipaddr><sip-
mask>|any}{<destination-ipaddr><dip-mask>|any}[dscp<0-63>][fragment]
Setstherulethatanextendedingress
ACLisusedtomatchIPpacket.
zte(extend-acl-group)#rule<1-500>{permit|deny}tcp{<source-ipaddr
><sip-mask>|any}[source-port<0-65535><sport-mask>]{<destination-ipa
ddr><dip-mask>|any}[dest-port<0-65535><dport-mask>][establishing|
established][dscp<0-63>][fragment]
Setstherulethatanextendedingress
ACLisusedtomatchTCPpacket.
zte(extend-acl-group)#rule<1-500>{permit|deny}udp
{<source-ipaddr><sip-mask>|any}[source-port<0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>|any}[dest-port
<0-65535><dport-mask>][dscp<0-63>][fragment]
Setstherulethatanextendedingress
ACLisusedtomatchUDPpacket.
zte(extend-acl-group)#rule<1-500>{permit|deny}arp{<sender-ipaddr><s
ip-mask>|any}{<target-ipaddr><tip-mask>|any}
Setstherulethatanextendedingress
ACLisusedtomatchARPpacket.
zte(cfg)#clearingress-aclextendnumber<100-199>ClearsanextendedportACLinstance.
zte(cfg)#configingress-acllinknumber<200-299>
Createsandconguresalayer-2
ingressACLinstance.
zte(link-acl-group)#rule<1-500>{permit|deny}ip{[cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]}
Setstherulethatalayer-2ingressACL
isusedtomatchIPpacket.
zte(link-acl-group)#rule<1-500>{permit|deny}arp{[cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]}
Setstherulethatalayer-2ingressACL
isusedtomatchARPpacket.
zte(link-acl-group)#rule<1-500>{permit|deny}other{[ether-type
<1501-65535>|dsap-ssap<0-65535>][cos<0-7>][<vlan-id>[<vlan-mask
>]][<source-mac><smac-mask>|any][<dest-mac><dmac-mask>|any]}
Setstherulethatalayer-2ingressACL
isusedtomatchthepacketexcept
IP/ARP .
zte(link-acl-group)#rule<1-500>{permit|deny}any[<vlan-id>[<vlan-mask
>]][cos<0-7>][<source-mac><smac-mask>|any][<dest-mac><dmac-mask>|
any]
Setstherulethatalayer-2ingressACL
isusedtomatchpacketswithspecied
cos,VLANid,smac,anddmacags.
zte(cfg)#clearingress-acllinknumber<200-299>Clearsalayer-2ingressACLinstance.
zte(cfg)#configingress-aclhybridnumber<300-399>
Createsandconguresahybridingress
ACLinstance.
4-44
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential