Intellinet 560931, Руководство пользователя

Страница: 168 / 281

168
Parameters:
<port_list> : Port list or “all”; default: All ports
permit : Permit forwarding (default)
deny : Deny forwarding
<rate_limiter> : Rate limiter number (1-15) or “disable”
<port_redirect>: Port list for copy of frames or “disable”
<mirror> : Mirror of frames: enable|disable
<logging> : System logging of frames: log|log_disable
<shutdown> : Shut down ingress port: shut|shut_disable
Example:
Security/Network/ACL>Action 1 permit 10 dis en log shut
Result:
ACL Configuration:
==================
Port Policy Action Rate L. Port C. Mirror Logging Shutdown Counter
---- ------ ------ ------- ------- -------- -------- -------- -------
1 0 Permit 10 Disabled Enabled Enabled Enabled 0
Rate Limiter
Syntax :
Security Network ACL Rate [<rate_limiter_list>] [<rate_unit>]
[<rate>]
Parameters:
<rate_limiter_list>: Rate limiter list (1-16), default: All rate
limiters
<rate_unit> : IP flags: pps|kbps, default: pss
<rate>: Rate in pps (0-100) or kbps (0, 100, 2*100, 3*100, ...,
1000000)
Example: Rate Limiter ID=10, Rate = 300kbps
Security/Network/ACL>rate 10 kbps 300
Result:
Rate Limiter Rate
------------ ----
..........
9 1 PPS
10 300 KBPS
.......
ACL Policy
Syntax:
Security Network ACL Policy [<port_list>] [<policy>]
Example:
Security/Network/ACL>policy 1 2
Access Control List
Syntax:
Security Network ACL Add [<ace_id>] [<ace_id_next>] [(port
<port_list>)] [(policy <policy> <policy_bitmask>)]
[<tagged>] [<vid>] [<tag_prio>] [<dmac_type>] [(etype
[<etype>] [<smac>] [<dmac>]) |
(arp [<sip>] [<dip>] [<smac>] [<arp_opcode>] [<arp_flags>]) |
(ip [<sip>] [<dip>] [<protocol>] [<ip_flags>]) |
(icmp [<sip>] [<dip>] [<icmp_type>] [<icmp_code>]
[<ip_flags>]) |
(udp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]) |
(tcp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]