ZyXEL Communications IES4005M - Page 110

Chapter 13 Switch Features
IES4005M User’s Guide
110
acl <acl-profile>
Use the specified ACL profile for the ports. C 13
no acl <acl-profile>
Do not use the specified ACL profile for the ports. C 13
acl-profile <name>
Creates an ACL profile and enters the sub-command mode for
configuring it.
name: up to 31 printable characters
C13
Use the following sub-commands to set the rules for the ACL profile.
ether-type <etype>
Specifies an Ethernet type.
etype: Ethernet type in hexadecimal (0000-FFFF).
C13
source-mac <mac>
Specifies a source MAC. C 13
dest-mac <mac>
Specifies a destination MAC. C 13
source-oui <oui>
Specifies a source MAC Organization Unit Identifier (OUI).
oui: 00:00:00-FF:FF:FF
C13
dest-oui <oui>
Specifies a destination MAC Organization Unit Identifier (OUI). C 13
inner-vlan <vid>
Specifies an inner VLAN ID. C 13
outer-vlan <vid>
Specifies an outer VLAN ID. C 13
inner-pbit <pbit>
Specifies an inner VLAN priority bit.
pbit: 0-7
C13
outer-pbit <pbit>
Specifies an outer VLAN priority bit. C 13
source-ip range <ip>/<mask>
Specifies a source IP range.
mask: 16-32
C13
dest-ip range <ip>/<mask>
Specifies a destination IP range. C 13
source-ip <ip>
Specifies a source IP address. C 13
dest-ip <ip>
Specifies a destination IP address. C 13
protocol <protocol>
Specifies an IP protocol.
protocol: 0-255
C13
ip-precedence <precedence>
Specifies an IP precedence.
precedence: 0-7
C13
dscp <dscp>
Specifies an IP DSCP.
dscp: 0-63
C13
source-ipv6 <ipv6>
Specifies a source IPv6 address. C 13
dest-ipv6 <ipv6>
Specifies a destination IPv6 address. C 13
next-header <next-header>
Specifies an IPv6 next header.
next-header: 0 ~ 255
C13
traffic-class <traffic-class>
Specifies an IPv6 traffic class.
traffic-class: 0 ~ 255
C13
source-l4-port range <start-
port> <end-port>
Specifies a layer 4 source port range.
start-port: 0-65535
end-port: 0-65535
C13
Table 75 ACL Commands Summary (continued)
COMMAND DESCRIPTION M P