Ruijie Networks RG-S2600E Series, Cli Reference Manual

Page: 890 / 1191

S2600E CLI Reference Guide Chapter 1 ACL Configuration Commands
Ruijie(config)# access-list 702 deny host 00d0f8000c0c any
aarp
Ruijie(config)# interface gigabitethernet 1/1
Ruijie(config-if)# mac access-group 702 in
4. Example of the extended expert ACL
The following example shows how to create and display an
extended expert ACL. This expert ACL denies all the TCP
packets with the source IP address 192.168.12.3 and the
source MAC address 00d0.f800.0044.
Ruijie(config)# access-list 2702 deny tcp host
192.168.12.3 mac 00d0.f800.0044 any any
Ruijie(config)# access-list 2702 permit any any any any
Ruijie(config)# show access-lists
expert access-list extended 2702
10 deny tcp host 192.168.12.3 mac 00d0.f800.0044 any any
10 permit any any any any
Command Description
show
access-lists
Show all the ACLs.
Related
commands
mac
access-group
Apply the extended MAC ACL on the
interface.
Platform
description
The software version must be RGOS10.0 and higher.
1.1.2 deny
One or multiple deny conditions are used to determine whether to forward or
discard the packet. In ACL configuration mode, you can modify the existent ACL
or configure according to the protocol details.
Use this command to set deny rules
1. Standard IP ACL
[ sn ] deny { source source-wildcard | host source | any| interface
idx }[ time-range tm-range-name ]
2. Extended IP ACL
[ sn ] deny protocol source source-wildcard destination
destination-wildcard [ precedence precedence ] [ tos tos ] [ fragment ]
[ range lower upper ] [ time-range time-range-name ]