D-Link DES-7200, Cli Reference Manual

Page: 1010 / 1180

Chapter 54 ACL Configuration Commands DES-7200 CLI Reference Guide
54-2
ID Meaning
63
flow-label flow-label Flow label in the range 0 to 1048575
dst Packet destination IP address (host address or network address)
dst-wildcard
Destination IP address wildcard. It can be discontinuous, such as
0.255.0.32
fragment Packet fragment filtering
precedence
precedence
Packet precedence value (0 to 7)
time-range
tm-rng-name
Time range of packet filtering, named tm-rng-name
tos tos Type of service (0 to 15)
cos cos Class of service (0-7)
cos inner cos COS of the packet tag
icmp-type ICMP message type (0 to 255)
icmp-code ICMP message type code (0 to 255)
icmp-message ICMP message type name (0 to 255)
operator port [ port ]
Operator (lt-smaller, eq-equal, gt-greater, neq-unequal,
range-range)
port indicates the port number. Dyadic operation needs two port
numbers, while other operators only need one port number
src-mac-addr Physical address of the source host
dst-mac-addr Physical address of the destination host
VID vid VLAN ID
VID inner vid VID of the tag
ethernet-type Ethernet protocol type. 0x value can be entered.
match-all tcpf Match all bits of the TCP flag.
text Remark text
in Filter the incoming packets of the interface
out Filter the outgoing packets of the interface
{ rule mask offset }
+
rule: Hexadecimal value field; mask: Hexadecimal mask field
offset: Refer to the offset table
―+‖ sign indicates at least one group
The fields in the packet are as follows:
AA AA AA AA AA AA BB BB BB BB BB BB CC CC DD DD