Zte ZXR10 5250 Series - Ingress-Acl Global Rule Type-Any

ZXR105250SeriesCommandReference
Guidelines
ARPrulecanmatchsender-speciedIP ,anysenderIP ,destination-speciedIP ,
anydestinationIP ,coseld,VLANeld,source-speciedMAC,anysourceMAC,
destination-speciedMACandanydestinationMAC.Therulecanbeboundtooneorall
ports.
4.13.44ingress-aclglobalruletype-any
Purpose
ThiscommandsetstherulethattheglobalingressACLmatchesthenon-IPv6packet.
CommandMode
GlobalingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}port{<1-28>|any}any{[ether-type<1501-65535>][cos<0-7
>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|any][<dest-mac><dmac-mask>|any]}
ParameterDescription
ParameterDescription
<1-16>Globalrulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
<1-28>
Bindstheglobalruletoaport.Differentdeviceshavedifferent
portnumberranges.Inthesyntax,the5250-28TCdeviceisused
asanexample.
any(rst)Bindstheglobalruletoallports.
any(second)
Thisruleonlymatchesnon-IPv6packet.TheIPv6packetignores
thisrule.
ether-type<1501-65535>
Thisruleisonlyvalidforthepacketwithspeciedether-type.
Otherpacketsignorethisrule.Therangeofether-typeis1501
to65535.
cos<0-7>
Thisruleisonlyvalidforthecos-speciedmessage.Ignorethis
ruleforothermessages.Therangeofcosis0to7.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
<vlan-mask>OptionalVLANmask.Thedefaultvalueis0xfff.
4-258
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential