Zte ZXR10 2928E-PS

ZXR102900ESeriesCongurationGuide
CommandFunction
zte(hybrid-acl-group)#rule<1-500>{permit|deny}all
SetstherulethatahybridingressACL
isusedtomatchanypacket.
zte(cfg)#clearingress-aclhybridnumber<300-399>ClearsahybridingressACLinstance.
zte(cfg)#configingress-aclglobal
Entersandconguresaglobalingress
ACLinstance.
zte(global-acl-group)#rule<1-16>{permit|deny}port{<1-28>|
any}<ip-protocol>{<source-ipaddr><sip-mask>|any}{<destina
tion-ipaddr><dip-mask>|any}[dscp<0-63>][fragment][cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethataglobalingressACL
matchesIPv4–speciedprotocoleld
packet.
zte(global-acl-group)#rule<1-500>{permit|deny}port{<1-28>|any}
ip{<source-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|
any}[dscp<0-63>][fragment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-
mac><smac-mask>|any][<dest-mac><dmac-mask>|any]
SetstherulethataglobalingressACL
matchesIPv4packet.
zte(global-acl-group)#rule<1-500>{permit|deny}port{<1-
28>|any}tcp{<source-ipaddr><sip-mask>|any}[source-port
<0-65535><sport-mask>]{<destination-ipaddr><dip-mask>|
any}[dest-port<0-65535><dport-mask>][dscp<0-63>][fragment][cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethataglobalingressACL
matchesIPv4–TCPpacket.
zte(global-acl-group)#rule<1-500>{permit|deny}port{<1-28>|
any}udp{<source-ipaddr><sip-mask>|any}[source-port
<0-65535><sport-mask>]{<destination-ipaddr><dip-mask>|
any}[dest-port<0-65535><dport-mask>][dscp<0-63>][fragment][cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethataglobalingressACL
matchesIPv4–UDPpacket.
zte(global-acl-group)#rule<1-500>{permit|deny}port{<1-28>|any}
arp{<sender-ipaddr><sip-mask>|any}{<target-ipaddr><tip-mask>|
any}[cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
SetstherulethataglobalingressACL
isusedtomatchARPpacket.
zte(global-acl-group)#rule<1-500>{permit|deny}port{<1-28>|any}any
{[ether-type<1501-65535>][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-m
ac><smac-mask>|any][<dest-mac><dmac-mask>|any]}
SetstherulethataglobalingressACL
isusedtomatchnonIPv6packet.
zte(cfg)#configegress-aclbasicnumber<400-499>
CreatesabasicegressACLinstance
andconguresit.
zte(egress-basic-acl)#rule<1-500>{permit|deny}{<source-ipaddr><
sip-mask>|any}[fragment]
SetsabasicegressACL.
zte(cfg)#clearegress-aclbasicnumber<400-499>ClearsabasicegressACLinstance.
4-46
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential