ZXR10 5250 Series Command Reference
Syntax
rule
<
1-500
>{
permit
|
deny
}<
ip-protocol
>{<
source-ipaddr
><
sip-mask
>|
any
}{<
destination- ipa
ddr
><
dip-mask
>|
any
}[
dscp
<
0-63
>][
fragment
][
cos
<
0-7
>][<
vlan-id
>[<
vlan-mask
>]][<
source-
mac
><
smac-mask
>|
any
][<
dest-mac
><
dmac-mask
>|
any
]
Parameter Description
Parameter
Description
<
1-500
>
Rule number.
permit
If the condition matches, access is permitted.
deny
If the condition matches, access is denied.
<
ip-protocol
>
This rule is only valid for messages with the specified IP protocol
field. Ignore this rule for other messages. The range of the IP
protocol field value is 0 to 255.
<
source-ipaddr
>
IP address of the source network or host transmitting packets. It is
a 32-bit IP address expressed in dotted decimal notation.
<
sip-mask
>
Source mask used for sources. It is a 32-bit IP address expressed
in dotted decimal notation.
any
(first)
The any keyword is used as the abbreviation of the source 0.0.0.0
and the source mask 0.0.0.0.
<
destination-ipaddr
>
Destination network or host of the transmitted packet. It is a 32-bit
IP address expressed in dotted decimal notation.
<
dip-mask
>
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
any
(second)
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
dscp
<
0-63
>
This rule is only valid for messages with the specified DSCP
value. Ignore this rule for other messages. The range of DSCP
value is 0 to 63.
fragment
This rule is only valid for fragment messages. For non-fragment
messages, this rule is ignored.
cos
<
0-7
>
This rule is only valid for the cos-specified message. Ignore this
rule for other messages. The range of cos is 0 to 7.
<
vlan-id
>
This rule is only valid for messages with the specified VLAN ID.
Ignore this rule for other messages. The rule of VLAN ID is 1
to 4094.
<
vlan-mask
>
Optional VLAN mask. The default value is 0xfff.
<
source-mac
>
Source MAC address of the transmitted packet.
<
smac-mask
>
Source MAC mask.
4-234
SJ-20131111172707-003|2013-11-27 (R1.0)
ZTE Proprietary and Confidential