Ruijie Networks RG-S2600E Series, Cli Reference Manual

Page: 895 / 1191

S2600E CLI Reference Guide Chapter 1 ACL Configuration Commands
Ruijie(config)#expert access-list extended 2702
Ruijie(config-exp-nacl)# deny tcp host 192.168.4.12
host 0013.0049.8272 any any
Ruijie(config-exp-nacl)# permit any any any any
Ruijie(config-exp-nacl)# show access-lists
expert access-list extended 2702
10 deny tcp host 192.168.4.12 host 0013.0049.8272 any
any
20 permit any any any any
Ruijie(config-exp-nacl)#
This example shows how to use the extended IP ACL. The
purpose is to deny the host with the IP address
192.168.4.12 to provide services through the TCP port 100
and apply the ACL to Interface gigabitethernet 1/1. The
configuration procedure is as below:
Ruijie(config)# ip access-list extended ip - ext - acl
Ruijie(config-ext-nacl)# deny tcp host 192.168.4.12 eq
100 any
Ruijie(config-ext-nacl)# show access-lists
ip access-list extended ip - ext - acl
10 deny tcp host 192.168.4.12 eq 100 any
Ruijie(config-ext-nacl)# exit
Ruijie(config)#interface gigabitethernet 1/1
Ruijie(config-if)# ip access-group ip - ext - acl in
Ruijie(config-if)#
This example shows how to use the extended MAC ACL.
The purpose is to deny the host with the MAC address
0013.0049.8272 to send Ethernet frames of the type 100
and apply the rule to Interface gigabitethernet 1/1. The
configuration procedure is as below:
Ruijie(config)#mac access-list extended mac1
Ruijie(config-mac-nacl)# deny host 0 013.0049.8272 any
aarp
Ruijie(config-mac-nacl)# show access-lists
mac access-list extended mac1
10 deny host 0013.0049.8272 any aarp
Ruijie(config-mac-nacl)# exit
Ruijie(config)# interface gigabitethernet 1/1
Ruijie(config-if)# mac access-group mac1 in
This example shows how to use the standard IP ACL. The
purpose is to deny the host with the IP address
192.168.4.12 and apply the rule to Interface gigabitethernet
1/1. The configuration procedure is as below:
Ruijie(config)#ip access-list standard 34