Zte ZXR10 5250 Series - Page 97

Chapter5ServiceConguration
CommandFunction
zte(egress-extend-acl)#rule<1-500>{permit|deny}icmp{<
source-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|
any}[iicmp-ttype<0-254><icmp-code>][dsscp<0-63>][
fragment]
SetsanextendedegressACLthat
matchesICMPpackets.
zte(egress-extend-acl)#rule<1-500>{permit|deny}ip{<
source-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-mask>|
any}[dsscp<0-63>][fragment]
SetsanextendedegressACLthat
matchesIPpackets.
zte(egress-extend-acl)#rule<1-500>{permit|deny}tcp{<
source-ipaddr><sip-mask>|any}[ssourrce-porrtt<0-65535><
sport-mask>]{<destination-ipaddr><dip-mask>|any}[desstt-porrtt
<0-65535><dport-mask>][establishing|established][dsscp<
0-63>][fragment]
SetsanextendedegressACLthat
matchesTCPpackets.
zte(egress-extend-acl)#rule<1-500>{permit|deny}udp{<
source-ipaddr><sip-mask>|any}[ssourrce-porrtt<0-65535><
sport-mask>]{<destination-ipaddr><dip-mask>|any}[desstt-porrtt
<0-65535><dport-mask>][dsscp<0-63>][fragment]
SetsanextendedegressACLthat
matchesUDPpackets.
zte(egress-extend-acl)#rule<1-500>{permit|deny}arp{<
sender-ipaddr><sip-mask>|any}{<target-ipaddr><tip-mask>|any}
SetsanextendedegressACLthat
matchesARPpackets.
zte(cfg)#clearegress-aclextendnumber<500-599>ClearsanextendedegressACL
instance.
zte(cfg)#configegress-acllinknumber<600-699>Createsalayer-2egressACL
instanceandconguresit.
zte(egress-link-acl)#rule<1-500>{permit|deny}ip{[coss
<0-7>][<vlan-id>[<vlan-mask>]][<dest-mac><dmac-mask>|any]}
Setsalayer-2egressACLthat
matchesIPpackets.
zte(egress-link-acl)#rule<1-500>{permit|deny}arp{[coss
<0-7>][<vlan-id>[<vlan-mask>]][<dest-mac><dmac-mask>|any]}
Setsalayer-2egressACLthat
matchesARPpackets.
zte(egress-link-acl)#rule<1-500>{permit|deny}other
{[ether-type<1501-65535>|dsap-ssap<0-65535>][coss
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>|any]}
Setsalayer-2egressACLthat
matchespacketsexceptIP/ARP
packets.
zte(egress-link-acl)#rule<1-500>{permit|deny}any
[<vlan-id>[<vlan-mask>]][cos<0-7>][<dest-mac><dmac-mask>|
any]
Setstherulethatalayer-2egress
ACLisusedtomatchpacketswith
speciedcos,VLANid,anddmac
ags.
zte(cfg)#clearegress-acllinknumber<600-699>Clearsalayer-2egressACL
instance.
zte(cfg)#configegress-aclhybridnumber<700-799>CreatesahybridegressACL
instanceandconguresit.
5-49
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential