Digitus DN-80233, Руководство пользователя, Страница: 213 / 379

212
this rule are forwarded.
Default
none
(IP Standard ACL)
Format
access-list <1-99> {deny | permit} <srcip> <srcmask> Mode Global Config
(IP Extended ACL)
Format
access-list <100-199> {deny | permit} {every | {{icmp | igmp | ip | tcp | udp | <number>}
<srcip> <srcmask>[{eq {<portkey> |<portvalue>} | range <startport> <endport>}] <dstip>
<dstmask> [{eq {<portkey>| <portvalue>} | range <startport> <endport>}][precedence
<precedence> | tos <tos> <tosmask> | dscp <dscp>][assign-queue <queue-id>] [redirect
<unit/slot/port>]}}
Mode
Global Config
9.2.1.1 no access-list
This command deletes an IP ACL that is identified by the parameter <
accesslistnumber>
from the
system
.
Format
no access-list
<
accesslistnumber
>
Mode Global Config
9.2.2 ip access-group
This command attaches a specified IP access-control list to an interface.
An optional sequence number may be specified to indicate the order of this IP access list relative
to other IP access lists already assigned to this interface and direction. A lower number indicates
higher precedence order. If a sequence number is already in use for this interface and direction,
the specified access list replaces the currently attached IP access list using that sequence number.
If the sequence number is not specified for this command, a sequence number that is one greater
than the highest sequence number currently in use for this interface and direction is used.
Default
none
Format
ip access-group
<
accesslistnumber
> <
in | out
>
[sequence <1-4294967295>]
Mode Interface Config
9.2.2.1 no ip access-group
This command removes a specified IP access-control list from an interface.
Default
none
Format
no ip access-group
<
accesslistnumber
> <
in | out
>
Mode Interface Config
9.2.3 show ip access-lists