Zte ZXR10 5250 Series - Egress-Acl Hybrid Rule Type-Ip-Protocol

ZXR105250SeriesCommandReference
4.13.66egress-aclhybridruletype-ip-protocol
Purpose
ThiscommandsetstherulethatthehybridegressACLmatchesthepacketswith
IPv4-speciedeld.
CommandMode
HybridegressACLcongurationmode
Syntax
rule<1-500>{permit|deny}<ip-protocol>{<source-ipaddr><sip-mask>|any}{<destination-ipad
dr><dip-mask>|any}[dscp<0-63>][fragment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-m
ac><smac-mask>|any][<dest-mac><dmac-mask>|any]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
<ip-protocol>
ThisruleisonlyvalidformessageswiththespeciedIPprotocol
eld.Ignorethisruleforothermessages.TherangeofIPprotocol
eldvalueis0to255.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskusedforsources.Itisa32-bitIPaddressexpressed
indotteddecimalnotation.
any(rst)
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itisa32-bit
IPaddressexpressedindotteddecimalnotation.
<dip-mask>
Destinationmaskusedfordestination.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0
dscp<0-63>
ThisruleisonlyvalidforthemessagewiththespeciedDSCP
value.Ignorethisruleforothermessages.TherangeofDSCP
valueis0to63.
fragment
Thisruleisonlyvalidforfragmentmessages.Fornon-fragment
messages,thisruleisignored.
4-278
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential