SNR S2940-8G-v2, Configuration Manual

Page: 287 / 420

SNR S2940-8G-v2 Switch Configuration Guide
ACL Configuration
access-list<num> { deny | permit } { any-source-mac | { host-
source-mac<host_smac> } | { <smac><smac-mask> } } {
any-destination-mac | { host-destination-mac <host_dmac>
} | { <dmac><dmac-mask> } } igmp { { <source><source-
wildcard> } | any-source | { host-source<source-host-ip> } }
{ { <destination><destination-wildcard> } | any-destination
| { host-destination<destination-host-ip> } } [<igmp-type>]
[precedence <precedence>] [tos <tos>][time-range<time-
range-name>] Creates a numbered mac-igmp
extended mac-ip access rule; if
the numbered extended access-
list of specified number does not
exist, then an access-list will be
created using this number.
access-list<num> { deny | permit } { any-source-mac
| { host-source-mac<host_smac> } | { <smac><smac-
mask> } } { any-destination-mac | { host-destination-
mac <host_dmac> } | { <dmac><dmac-mask> } } tcp
{ { <source><source-wildcard> } | any-source | { host-
source<source-host-ip> } } [s-port { <port1> | range <sPort-
Min> <sPortMax> } ] { { <destination><destination-wildcard>
} | any-destination | { host-destination <destination-host-
ip> } } [d-port { <port3> | range <dPortMin> <dPortMax>
} ] [ack+fin+psh+rst+urg+syn] [precedence <precedence>]
[tos <tos>][time-range<time-range-name>] Creates a numbered mac-ip ex-
tended mac-tcp access rule; if
the numbered extended access-
list of specified number does not
exist, then an access-list will be
created using this number.
access-list<num> { deny | permit } { any-source-mac | { host-
source-mac<host_smac> } | { <smac><smac-mask> } } {
any-destination-mac | { host-destination-mac <host_dmac>
} | { <dmac><dmac-mask> } } udp { { <source><source-
wildcard> } | any-source | { host-source<source-host-ip> }
} [s-port { <port1> | range <sPortMin> <sPortMax> } ] { {
<destination><destination-wildcard> } | any-destination | {
host-destination<destination-host-ip> } } [d-port { <port3>
| range <dPortMin> <dPortMax> } ] [precedence <prece-
dence>] [tos <tos>][time-range<time-range-name>] Creates a numbered mac-udp
extended mac-ip access rule; if
the numbered extended access-
list of specified number does not
exist, then an access-list will be
created using this number.
access-list<num> { deny | permit } { any-source-mac | { host-
source-mac<host_smac> } | { <smac><smac-mask> } } {
any-destination-mac | { host-destination-mac <host_dmac>
} | { <dmac><dmac-mask> } } { eigrp | gre | igrp | ip |
ipinip | ospf | { <protocol-num> } } { { <source><source-
wildcard> } | any-source | { host-source<source-host-ip> }
} { { <destination><destination-wildcard> } | any-destination
| { host-destination<destination-host-ip> } } [precedence
<precedence>] [tos <tos>][time-range<time-range-name>] Creates a numbered extended
mac-ip access rule for other spe-
cific mac-ip protocol or all mac-
ip protocols; if the numbered ex-
tended access-list of specified
number does not exist, then an
access-list will be created using
this number.
no access-list <num> Deletes this numbered extended
MAC-IP access rule.
287