Ruijie RG-S2600G-I Series, Cli Reference Manual

Page: 904 / 1192

CLI Reference Guide ACL Configuration Commands
precedence Packet precedence value (0 to 7)
range The layer 4 port number range of the packet.
time-range tm-rng-name Time range of packet filtering, named tm-rng-name
tos Type of service (0 to 15)
cos Class of service (0-7)
cos inner cos COS of the packet tag
icmp-type ICMP message type (0 to 255)
icmp-code ICMP message type code (0 to 255)
icmp-message ICMP message type name (0 to 255)
operator port[port]
Operator (lt-smaller, eq-equal, gt-greater, neq-unequal, range-range)
port indicates the port number. Dyadic operation needs two port numbers,
while other operators only need one port number
src-mac-addr Physical address of the source host
dst-mac-addr Physical address of the destination host
VID vid VLAN ID
VID inner vid VID of the tag
ethernet-type Ethernet protocol type. 0x value can be entered.
match-all tcpf Match all bits of the TCP flag.
text Remark text
in Filter the incoming packets of the interface
out Filter the outgoing packets of the interface
{rule mask offset}
+
rule: Hexadecimal value field; mask: Hexadecimal mask field
offset: Refer to the offset table
“+” sign indicates at least one group
log Output the matching syslog when the packet matches the ACL rule.
The fields in the packet are as follows:
AA AA AA AA AA AA BB BB BB BB BB BB CC CC DD DD
DD DD EE FF GG HH HH HH II II JJ KK LL LL MM MM
NN NN OO PP QQ QQ RR RR RR RR SS SS SS SS TT TT
UU UU VV VV VV VV WW WW WW WW XY ZZ aa aa bb bb
The corresponding offset table is as follows:
Letter Meaning Offset Letter Meaning Offset
A Destination MAC 0 O TTL field 34
B Source MAC 6 P Protocol number 35
C Data frame length field 12 Q IP check sum 36