ZXR10 2900 Series User Manual
Command
Function
zte(cfg)#
rule
<
rule-id
>{
permit
|
deny
}{<
port-id
>|
any
}{<
ip-p
rotocol
>|
ip
|
tcp
|
udp
|
arp
|
any
}{<
source-ipaddr wildcard
>|
any
}{<
destination-ipaddr wildcard
>|
any
}[
dscp
<
0-63
>][
fragment
][
cos
<
0-7
>][<
source-vlanId
>][<
source-mac
wildcard
>|
any
][<
destination-mac
wildcard
>|
any
]
This configures a
global ACL rule.
�
rule-id: designate the sub-item of the global access control
list and the range is 1~16.
�
ip-protocol, ip, tcp, udp, arp, any: the matching protocol.
It can be one of the keyword “tcp”, “udp”, “arp”and ”ip”
or an integer from 0 to 255 representing IP protocol. any
represents ignoring the protocol type.
Creating a global ACL instance means entering the configura-
tion mode of this instance, that is , global ACL configuration
mode.
12. To sort the rules in ACL instance, use the following command.
Command
Function
zte(cfg)#
move
<
rule-id
>{
after
|
before
}<
rule-id
>
This sorts the rules in
ACL instance.
13. To delete a rule in ACL instance, use the following command.
Command
Function
zte(cfg)#
clear rule
<
rule-id
>
This deletes a rule in
ACL instance.
14. To show the information of a configured ACL instance, use the
following command.
Command
Function
zte(cfg)#
show acl config
[<
acl-number
>|<
acl-name
>][
rule
<
rule-id
>|
permit
|
deny
|
active
|
passive
|
snmp
|
command
|
policy
|
ports
]
This shows the
information of a
configured ACL
instance.
15. To display ACL configuration information of port, use the fol-
lowing command.
Command
Function
zte(cfg)#
show acl binding
{
all
|
port
[<
portlist
>]|
trunk
[<
trunklist
>]}
This displays
ACL configuration
information of port.
152
Confidential and Proprietary Information of ZTE CORPORATION
