Dahua DH-PFS6428-24T, Руководство по настройке CLI

Страница: 97 / 124

6.4.3
rule
Command Description
rule <1-127> deny/permit <source mac> <destination mac> cos
<0-7>/vlan <1-4094>/eth_type ETHTYPE
rule <1-127> deny/permit icmp/igmp/tcp/udp/ip <source ip>
<destination ip> ip_pri<0-7> / tos_pri<0-15>/ dscp_pri<0-63>
//This command is used to add an ACL ACE entry.
no rulel <1-127>
//This command is used to delete an ACL ACE entry.
Parameter
Parameter Parameters of the command mode
<1-127> Rule number, range: 1-127
source mac Source MAC address
destination mac Destination MAC address,
1-4094 Vlan-id,range:1-4094
ETHTYPE Ethernet type, range: 0x0000-0xFFFF;
0x0000 or do not fill in the representation
does not match the Ethernet type field,
source ip Source IP address
destination ip Destination IP address,
<0-7> Match the IP priority, range 0-7
<0-15> Match the TOS, range 0-15
<0-63> Match the DSCP, range 0-63
Default
None
Command Mode
Global configuration mode
Example
//This command is used to add a Mac - acl rules.
switch(config)#mac acl 1
switch(config-acl-mac)#rule 1 deny any any
6.4.4
ip/mac access-group
Command Description
ip access-group <100-999>
no ip access-group <100-999>
mac access-group <1-99>
no mac access-group <1-99>
//Using this command, you can bind the port to use the ACL rule.
Parameter