Ruijie Networks RG-S2600E Series, Cli Reference Manual

Page: 879 / 1191

S2600E CLI Reference Guide Chapter 1 ACL Configuration Commands
1
ACL Configuration
Commands
For IDs used in the following commands, refer to the command ID table below:
ID Meaning
ID
Number of access list. Range:
Standard IP ACL: 1 to 99, 1300 to 1999
Extended IP ACL: 100 to 199,2000 to 2699
Extended MAC ACL: 700 to 799
Extended expert ACL: 2700 to 2899
name ACL name
sn ACL SN (products can be set according to the priority)
start-sn Start sequence number
inc-sn Sequence number increment
deny If matched, access is denied.
permit If matched, access is permitted.
port
Protocol number. For IPv6, this field can be IPv6, icmp, tcp, udp
and numbers 0 to 255. For IPv4, it can be one of eigrp, gre, ipinip,
igmp, nos, ospf, icmp, udp, tcp, and ip, or it can be numbers 0 to
255 that represent the IP protocol. It is described when some
important protocols, such as icmp/tcp/udp, are listed individually.
interface idx Interface index
src Packet source IP address (host address or network address)
src-wildcard
Source IP address wildcard. It can be discontinuous, for example,
0.255.0.32.
src-ipv6-pfix Source IPv6 network address or network type
dst-ipv6-pfix Destination IPv6 network address or network type
pfix-len Prefix mask length
src-ipv6-addr Source IPv6 address
dst-ipv6-addr Destination IPv6 address
dscp
Differential service code point, and code point value. Range: 0 to
63