NETGEAR ProSafe GSM7324, Справочное руководство, Страница: 207 / 263

7000 Series L3 Managed Switch Reference Manual for Software v1.0
ACL Commands 10-3
May 30, 2003 Beta Draft
config acl rule delete
This command removes a rule from the ACL referenced by the parameter
<aclid>.
The rule is
identified by the
<rulenum>
parameter.
Format
config acl rule delete <aclid> <rulenum>
config acl rule action
This command removes a rule from the ACL referenced by the parameter
<aclid>.
The rule is
identified by the
<rulenum>
parameter. The values of
permit
or
deny
indicate how this rule is
evaluated.
Format
config acl rule action <aclid> <rulenum> <permit/deny>
config acl rule match dstip
This command specifies a destination IP Address and Mask match condition for an ACL rule
referenced by the
<aclid>
and
<rulenum>.
The
<ipaddr>
and
<ipmask>
parameters are 4-
digit dotted-decimal numbers which represent the destination IP Address and IP Mask,
respectively.
Format
config acl rule match dstip <aclid> <rulenum> <ipaddr> <ipmask>
config acl rule match dstl4port keyword
This command specifies a destination layer 4 port match condition for an ACL rule referenced by
the
<aclid>
and
<rulenum>
. The
<portkey>
parameter uses a single keyword notation and
currently has the values of
domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp
,
and
www
. Each of these values translates into its equivalent port number, which is used as both the
start and end of a port range.
This command and the
config acl match destl4port range
command are two methods of
specifying the destination layer 4 port range as a match condition. Either command can be used to
configure or modify the destination layer 4 port range.
Format
config acl rule match dstl4port keyword <aclid> <rulenum> <portkey>