INS_CWGE24MS2_REV–
10/05/16 PAGE 219
INSTALLATION AND OPERATION MANUAL
CWGE24MS2
TECH SUPPORT: 1.888.678.9427
3. Filter a range of source IP address.
Command: source ip IPADDR IPADDR
The second IPADDR is a mask, for example: 255.255.0.0
4. Filter a range of destination IP address.
Command: destination ip IPADDR IPADDR
L4 ACL Support:
1. Filter a UDP/TCP source port.
2. Filter a UDP/TCP destination port.
Default Settings
Maximum profile
: 64.
Maximum profile name length : 16.
Notices
The ACL name should be the combination of the digit or the alphabet.
CLI Configuration
Node
Command
Description
enable
show access-list
This command displays all of the access control profiles.
configure access-list STRING
ip-type (ipv4|ipv6)
This command creates a new access control profile.
Where the STRING is the profile name. And you can specify the type,
ipv4 or ipv6.
configure no access-list STRING This command deletes an access control profile.
acl
show
This command displays the current access control profile.
acl
action
(disable|drop|permit)
This command actives this profile.
disable – disable the profile.
drop – If packets match the profile, the packets will be dropped.
permit – If packets match the profile, the packets will be forwarded.
acl
action dscp remarking
<0-63>
This command actives this profile and specify that it is for DSCP remark.
And configures the new DSCP value which will be override to all
packets matched this profile.