Zte ZXR10 5250 Series - Page 95

Chapter5ServiceConguration
CommandFunction
zte(hybrid-acl-group)#rule<1-500>{permit|deny}
ipv6tcp{<source-ipv6addr><sipv6-mask>|any}[source-port
<0-65535><sport-mask>][<destination-ipv6addr><dipv6-mask>|
any][dest-port<0-65535><dport-mask>][<vlan-id>]
Setstherulethatahybridingress
ACLisusedtomatchIPv6-TCP
packets.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}ipv6
udp{<source-ipv6addr><sipv6-mask>|any}[source-port
<0-65535><sport-mask>][<destination-ipv6addr><dipv6-mask>|
any][dest-port<0-65535><dport-mask>][<vlan-id>]
Setstherulethatahybridingress
ACLisusedtomatchIPv6-UDP
packets.
zte(hybrid-acl-group)#rule<1-500>{permit|
deny}ipv6any{<source-ipv6addr><sipv6-mask>|
any}[<destination-ipv6addr><dipv6-mask>|any][<vlan-id>]
Setstherulethatahybridingress
ACLisusedtomatchIPv6
packets.
zte(hybrid-acl-group)#rule<1-500>{permit|
deny}ipv6icmp{<source-ipv6addr><sipv6-mask>|
any}[<destination-ipv6addr><dipv6-mask>|any][<vlan-id>]
Setstherulethatahybridingress
ACLisusedtomatchIPv6ICMP
packets.
zte(hybrid-acl-group)#rule<1-500>{permit|deny}allSetstherulethatahybridingress
ACLisusedtomatchanypacket.
zte(cfg)#clearingress-aclhybridnumber<300-399>ClearsahybridingressACL
instance.
zte(cfg)#configingress-acluser-definenumber<801-828>
Createsandconguresa
user-denedingressACL
instance.
zte(ingress-user-define-acl)#rule<1-500>{permit|
deny}[udb1<udb-value><udb-mask>][udb2<udb-value><
udb-mask>][udb3<udb-value><udb-mask>][udb4<udb-value><
udb-mask>][udb5<udb-value><udb-mask>][udb6<udb-value><
udb-mask>][udb7<udb-value><udb-mask>][udb8<udb-value><
udb-mask>][udb9<udb-value><udb-mask>][udb10<udb-value><
udb-mask>][udb11<udb-value><udb-mask>][udb12
<udb-value><udb-mask>][udb13<udb-value><udb-mask>][
udb14<udb-value><udb-mask>][udb15<udb-value><udb-mask>]
Denesaruleinauser-dened
ingressACL.
zte(cfg)#clearingress-acluser-definenumber<801-828>
Deletesauser-denedingress
ACLinstance.
zte(cfg)#configingress-aclglobalEntersandconguresaglobal
ingressACLinstance.
zte(global-acl-group)#rule<1-16>{permit|deny}port
{<1-28>|any}<ip-protocol>{<source-ipaddr><sip-mask>|any}{<d
estination-ipaddr><dip-mask>|any}[dscp<0-63>][fragment][cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]
Setstherulethataglobalingress
ACLmatchesspeciedeldsof
IPv4packets.
5-47
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential