Zte ZXR10 2928E-PS

Chapter4ServiceConguration
CommandFunction
zte(hybrid-acl-group)#rule<1-500>{permit|deny}<ip-protocol>{<source-ipa
ddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|any}[dscp<0-63>][f
ragment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethatahybridingressACL
matchesIPv4–speciedprotocoleld
packet.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}ip{<source-ipaddr><s
ip-mask>|any}{<destination-ipaddr><dip-mask>|any}[dscp<0-63>][fra
gment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethatahybridingressACL
matchesIPv4packet.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}tcp{<source-ipaddr><s
ip-mask>|any}[source-port<0-65535><sport-mask>]{<destination-ipaddr
><dip-mask>|any}[dest-port<0-65535><dport-mask>][dscp<0-63>][fra
gment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethatahybridingressACL
matchesIPv4-TCPpacket.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}udp{<source-ipaddr
><sip-mask>|any}[source-port<0-65535><sport-mask>]{<destination-ipa
ddr><dip-mask>|any}[dest-port<0-65535><dport-mask>][dscp<0-63>][f
ragment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethatahybridingressACL
matchesIPv4-UDPpacket.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}arp{<sende
r-ipaddr><sip-mask>|any}{<target-ipaddr><tip-mask>|any}[cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethatahybridingressACL
isusedtomatchARPpacket.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}any{[ether-type<1501
-65535>][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]}
SetstherulethatahybridingressACL
isusedtomatchnon-IPv6packet.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}ipv6<ip-protocol>{<s
ource-ipv6addr><sipv6-mask>|any}{<destination-ipv6addr><dipv6-mask>|
any}[<vlan-id>]
Setstherulethatahybridingress
ACLisusedtomatchIPv6–specied
protocoleldpacket.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}ipv6tcp
{<source-ipv6addr><sipv6-mask>|any}[source-port<0-65535><s
port-mask>]{<destination-ipv6addr><dipv6-mask>|any}[dest-port
<0-65535><dport-mask>][<vlan-id>]
SetstherulethatahybridingressACL
isusedtomatchIPv6-TCPpacket.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}ipv6udp
{<source-ipv6addr><sipv6-mask>|any}[source-port<0-65535><s
port-mask>]{<destination-ipv6addr><dipv6-mask>|any}[dest-port
<0-65535><dport-mask>][<vlan-id>]
SetstherulethatahybridingressACL
isusedtomatchIPv6-UDPpacket.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}ipv6any
{<source-ipv6addr><sipv6-mask>|any}{<destination-ipv6addr><dipv6-mask>|
any}[<vlan-id>]
SetstherulethatahybridingressACL
isusedtomatchIPv6packet.
4-45
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential