FS TAP Series, Reference Manual

Page: 63 / 340

TAP Series Switch Command Line Reference
63
Command Syntax
(
sequence-num
ACL_SEQ_NUM |) (
permit
|
deny
) ( PROTOCOL_NUM |
any
|
tcp
(
src-port
( range L4_PORT_NUM L4_PORT_NUM | eq L4_PORT_NUM | gt L4_PORT_NUM | lt
L4_PORT_NUM | any ) | dst-port ( range L4_PORT_NUM L4_PORT_NUM | eq L4_PORT_NUM
| gt L4_PORT_NUM | lt L4_PORT_NUM | any ) |) ( tcp-code ( match-all | match any ) ( ack | fin
| psh | rst | syn | urg |) |) | udp ( src-port ( range L4_PORT_NUM1 L4_PORT_NUM2 | eq
L4_PORT_NUM |
gt
L4_PORT_NUM |
lt
L4_PORT_NUM |
any
) |
dst-port
(
range
L4_PORT_NUM1 L4_PORT_NUM2 |
eq
L4_PORT_NUM |
gt
L4_PORT_NUM |
lt
L4_PORT_NUM | any ) | icmp | igmp ) ( src-ip ( IP_ADDR IP_ADDR_WILD | host IP_ADDR | any )
| src-ipv6 ( IPv6_ADDR IPv6_ADDR_WILD | host IPv6_ADDR | any )) ( dst-ip ( IP_ADDR
IP_ADDR_WILD | host IP_ADDR | any ) | dst-ipv6 ( IPv6_ADDR IPv6_ADDR_WILD | host
IPv6_ADDR | any )) ( flow-label ( FLOW_LABEL LABEL_WILD | any )) ( dscp DSCP_VALUE | ip-
precedence PRECEDENCE_VALUE |) ( first-fragment | non-first-fragment | non-fragment |
non-or-first-fragment
|
small-fragment
|
any-fragment|
) (
options
|) (
vlan
( VLAN_ID
VLAN_WILD | any )|) ( inner-vlan ( VLAN_ID VLAN_WILD | any )|) ( cos COS_ID |) ( inner-cos
COS_ID |) ( ether-type ( ETHER_TYPE_VALUE ETHER_TYPE_WILD_VALUE | any )|) ( src-mac
( ACL_MAC_ADDR ACL_MAC_ADDR_WILD | any | host ACL_MAC_ADDR )|) ( dest-mac
( ACL_MAC_ADDR ACL_MAC_ADDR_WILD | any | host ACL_MAC_ADDR )|) (( ipv4-head | l4-
head ) UDF_VALUE UDF_VALUE_WILD UDF_OFFSET |)
sequence-num ACL_SEQ_NUM Specify a sequence number to create the acl
rule.
The valid range for sequence number is 1-
65535.
If the sequence number is not specified,
system should automatically assign one
number according to the base number and the
step length. The base number is the
maximum number in the flow (0 for empty
flow), the step length is 10.
permit Specify the action of the acl rule. Use the
parameter “ permit ” to indicate packets match
this rule is allowed to forward.
deny Specify the action of the acl rule. Use the
parameter “ deny ” to indicate packets match
this rule is not allowed to forward.
PROTOCOL_NUM | any | tcp | udp | icmp |
igmp | gre | nvgre
Specify the IP protocol number of the acl rule.
The valid range for IP protocol number is 0-
255.
Well known IP protocols can also be specified