ATEN ES0152, Руководство пользователя

Страница: 227 / 300

Chapter 25. CLI COMMAND REFERENC
-
215
access-list ace [update] <1-256> [next {<1-
256>|last}] [ingress {switch <switch_id>|switch
-
port {<1-53>|<1~53>}|interface {<port_
-
type_id>|<port_type_list>}|any}] [policy <0-255>
[policy-bitmask <0x0-0xFF>]] [tag
{tagged|untagged|any}] [vid {<1-4095>|any}]
[tag-priority {<0-7>|0-1|2-3|4-5|6-7|0-3|4-7|any}]
[dmac-type {unicast|multicast|broadcast|any}]
[frametype { any| etype [etype-value {<0x600-
0x7ff,0x801-0x805,0x807-0x86dc,0x86de-
0xffff>|any}] [smac {<mac_addr>|any}] [dmac
{<mac_addr>|any}]| arp [sip {<ipv4_sub
-
net>|any}] [dip {<ipv4_subnet>|any}] [smac
{<mac_addr>|any}] [arp-opcode
{arp|rarp|other|any}] [arp-flag [arp-request {<0-
1>|any}] [arp-smac {<0-1>|any}] [arp-tmac {<0-
1>|any}] [arp-len {<0-1>|any}] [arp-ip {<0-
1>|any}] [arp-ether {<0-1>|any}]]| ipv4 [sip
{<ipv4_subnet>|any}] [dip {<ipv4_subnet>|any}]
[ip-protocol {<0,2-5,7-16,18-255>|any}] [ip-flag
[ip-ttl {<0-1>|any}] [ip-options {<0-1>|any}] [ip-
fragment {<0-1>|any}]]| ipv4-icmp [sip {<ipv4_
-
subnet>|any}] [dip {<ipv4_subnet>|any}] [icmp-
type {<0-255>|any}] [icmp-code {<0-255>|any}]
[ip-flag [ip-ttl {<0-1>|any}] [ip-options {<0-
1>|any}] [ip-fragment {<0-1>|any}]]| ipv4-udp [sip
{<ipv4_subnet>|any}] [dip {<ipv4_subnet>|any}]
[sport {<0-65535> [to <0-65535>]|any}] [dport
{<0-65535> [to <0-65535>]|any}] [ip-flag [ip-ttl
{<0-1>|any}] [ip-options {<0-1>|any}] [ip-frag
-
ment {<0-1>|any}]]| ipv4-tcp [sip {<ipv4_sub
-
net>|any}] [dip {<ipv4_subnet>|any}] [sport {<0-
65535> [to <0-65535>]|any}] [dport {<0-65535>
[to <0-65535>]|any}] [ip-flag [ip-ttl {<0-1>|any}]
[ip-options {<0-1>|any}] [ip-fragment {<0-
1>|any}]] [tcp-flag [tcp-fin {<0-1>|any}] [tcp-syn
{<0-1>|any}] [tcp-rst {<0-1>|any}] [tcp-psh {<0-
1>|any}] [tcp-ack {<0-1>|any}] [tcp-urg {<0-
1>|any}]]| ipv6 [next-header {<0-5,7-16,18-
57,59-255>|any}] [sip {<ipv6_addr> [sip-bit
-
mask <uint>]|any}] [hop-limit {<0-1>|any}]| ipv6-
icmp [sip {<ipv6_addr> [sip-bitmask
<uint>]|any}] [icmp-type {<0-255>|any}] [icmp-
code {<0-255>|any}] [hop-limit {<0-1>|any}]|
ipv6-udp [sip {<ipv6_addr> [sip-bitmask
<uint>]|any}] [sport {<0-65535> [to <0-
65535>]|any}] [dport {<0-65535> [to <0-
65535>]|any}] [hop-limit {<0-1>|any}]| ipv6-tcp
[sip {<ipv6_addr> [sip-bitmask <uint>]|any}]
[sport {<0-65535> [to <0-65535>]|any}] [dport
{<0-65535> [to <0-65535>]|any}] [hop-limit {<0-
1>|any}] [tcp-flag [tcp-fin {<0-1>|any}] [tcp-syn
{<0-1>|any}] [tcp-rst {<0-1>|any}] [tcp-psh {<0-
1>|any}] [tcp-ack {<0-1>|any}] [tcp-urg {<0-
1>|any}]]} ] [action {permit|deny|filter {switchport
<1~53>|interface <port_type_list>}}] [rate-limiter
{<1-16>|disable}] [evc-policer {<1-256>|disable}]
[{redirect|port-copy} {switchport {<1-
53>|<1~53>}|interface {<port_type_id>|<port_
-
type_list>}|disable}] [mirror [disable]] [logging
[disable]] [shutdown [disable]] [lookup [disable]]
Use the access-list ace
global configuration
command to set the
access-list ace. The
command without the
update keywrod will
creates or overwrites
an existing ACE, any
unspecified parameter
will be set to its default
value. Use the update
keyword to update an
existing ACE and only
specified parameter
are modified. The ACE
must ordered by an
appropriate sequence,
the received frame will
only be hit on the first
matched ACE. Use the
next or last keyword to
adjust the ACE's
sequence order.
15
GLOBAL
_CONFIG
COMMAND DESCRIPTION P M