Chapter4ServiceConguration
CommandMode
BasicingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}{<source-ipaddr><sip-mask>|any}[fragment]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskusedforsources.Itisa32-bitIPaddressexpressed
indotteddecimalnotation.
any
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
fragment
Thisruleisonlyvalidforfragmentmessages.Fornon-fragment
messages,thisruleisignored.
Guidelines
TherulecanmatchIPv4packetswiththespeciedsourceIPaddresses,anysourceIP
address,orIPfragmentelds.
4.13.10clearingress-aclbasic
Purpose
ThiscommandclearsabasicingressACLinstance.
CommandMode
Globalcongurationmode
Syntax
clearingress-aclbasicnumber<1-99>
ParameterDescription
ParameterDescription
<1-99>NumberofthebasicingressACLinstance
4-219
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential