Dell N2000 Series, Руководство по настройке

Страница: 616 / 1460

616
Configuring Access Control Lists
continued
• igmp-type
igmp-type
—When igmp-type is specified, IP
ACL rule matches on the specified IGMP message type
(i.e., a number from 0 to 255).
• fragments—Specifies the rule matches packets that are
non-initial fragments (fragment bit asserted). Not valid
for rules that match L4 information such as TCP port
number since that information is carried in the initial
packet.
This keyword is visible only if the protocol is IP, TCP, or
UDP.
• log—Specifies that this rule is to be logged.
• time-range
time-range-name
—Allows imposing time
limitation on the ACL rule as defined by the parameter
time-range-name. If a time range with the specified name
does not exist and the ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the
ACL rule is applied immediately. If a time range with
specified name exists and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, then
the ACL rule is applied when the time-range with
specified name becomes active. The ACL rule is removed
when the time-range with specified name becomes
inactive.
• assign-queue
queue-id
—Specifies the assign-queue,
which is the queue identifier to which packets matching
this rule are assigned.
• {mirror | redirect}
unit/slot/ port
—Specifies the mirror
or redirect interface which is the unit/slot/port to which
packets matching this rule are copied or forwarded,
respectively.
• rate-limit
rate burst-size
—Specifies the allowed rate of
traffic as per the configured rate in kbps, and burst-size in
kbytes.
– Rate – the committed rate in kilobits per second
– Burst-size – the committed burst size in Kilobytes.
Command Purpose