Dasan V8102, Руководство пользователя

Страница: 261 / 910

User Manual
UMN:CLI
V8102
261
7.18.10.3 Access List ZeBos for UDP
To create an access-list (ACL) to filter packets specific to the UDP protocol, use the fol-
lowing command.
Command Mode Description
ipv6 access-list zebos WORD
{ deny | permit } udp
{ SOUR_ADDR |
SOUR_ADDR_RANGE | any }
{ DES_ADDR |
DES_ADDR_RANGE | any } [{ eq |
lt | gt | ne } <0-65535> | range
<0-65535> <0-65535>]
Global
Specifies a deny or permit statement of the Zebos ex-
tanded ACL to filter packets specific to the UDP proto-
col.
WORD: access-list name
deny: specifies route to deny.
permit: Specified route to permit.
SOUR_ADDR: source IPv6 address to match
(X:X::X:X/M)
SOUR_ADDR_RANGE: source IPv6 address range to
match (X:X::X:X X:X::X:X)
DES_ADDR: destication IPv6 address to match
(X:X::X:X/M)
DES_ADDR_RANGE: destication IPv6 address range
to match (X:X::X:X X:X::X:X)
eq: Specifies a destination port as equal to a given
value. (0-65535: actual equal value)
lt: Specifies a destination port as less than a given
value. (0-65535: actual less than value)
gt: Specifies a destination port as greater than a given
value. (0-65535: actual greater than value)
ne: Specifies a destination port as not equal to a given
value. (0-65535: Not equal than value)
label: Identifies an application. (1-65535: actual label
value)
precedence: Identifies a packet filter precedence level.
tos: Type of service (ToS) value to filter packets.
pkt-size: Identifies packet size.
gt: packet size less than or greater than specified val-
ue.
lt: packet size less than or greater than specified value.
(0-65535: packet size)
fragments: An ACL applies to the non-initial fragment of
packet.
log: logs the results.
interface: the name of the input or output interface.
ipv6 access-list zebos WORD
{ deny | permit } udp
{ SOUR_ADDR |
SOUR_ADDR_RANGE | any }
{ DES_ADDR |
DES_ADDR_RANGE | any } [{ eq |
lt | gt | ne } <0-65535> | range
<0-65535> <0-65535>] { label <1-
65535> | precedence <0-7> | tos
{<0-255> | range <0-255> <0-
255>} | pkt-size { lt | gt } <0-
65535> | range <0-65535> <0-
65535> | fragments | log | inter-
face { in | out } [{ tengigabitether-
net IFPORT | gpon IFPORT |
channelgroup IFPORT | vlan
VLANID }]
no ipv6 access-list zebos
WORD { deny | permit } udp
{ SOUR_ADDR |
SOUR_ADDR_RANGE | any }
{ DES_ADDR |
DES_ADDR_RANGE | any } [{ eq |
lt | gt | ne } <0-65535> | range
<0-65535> <0-65535>] { label <1-
65535> | precedence <0-7> | tos
Deletes the configured ZeBos extanded ACL entry.