Zte ZXR10 - Ip Access-Group

Chapter2ACLConguration
Syntaxdeny<protocol><source/prefix><destination/prefix>[time-ra
nge<timerange-name>]
nodeny<protocol><source/prefix><destination/prefix>[time-r
ange<timerange-name>]
Syntax
Description
<protocol>Protocoltypetobematched,ICMP ,IP ,TCP
orUDP;anintegerthatstandsfortheIP
protocolnumber ,range:0~254
<source/prefix>IPaddress/prexlengthofthesourcetobe
matched,inhexadecimalformat
<destination/prefix>IPaddress/prexlengthofthedestinationto
bematched,inhexadecimalformat
time-range
<timerange-name>
Timerangename,thelengthisnotmorethan
31characters
ExampleThisexampledescribeshowtodenytheaccesstothehostonthe
speciednetwork:
ZXR10(config)#ipv6aclextendednumber100
ZXR10(config-ext-v6acl)#denyipany105A:1002::1000/100
ZXR10(config-ext-v6acl)#denyip1030::1000/90102A:A002::1000/100
Related
Commands
permit
ipaccess-group
PurposeUsethiscommandtoapplytheACLtotheincomingoroutgoing
directionoftheinterface.DisabletheACLontheinterfacewith
noformofthiscommand.
CommandModesInterfaceconguration
Syntaxipaccess-group<acl-number|acl-name>{in|out}
noipaccess-group[<acl-number|acl-name>]{in|out}
Syntax
Description
<acl-number>ACLnumber
<acl-name>ACLnameoralias
ProductParameterDescription
ZXR10T160G
Thereistheoutparameter;<acl-number
>is1~349,1000~1999,2000~2999,or
3000~3499
ZXR10T64E/T128Thereistheoutparameter;<acl-number>
is1~199,1000~1999
CondentialandProprietaryInformationofZTECORPORATION17