Ruijie Networks RG-S2600E Series, Справочное руководство CLI

Страница: 880 / 1191

S2600E CLI Reference Guide Chapter 1 ACL Configuration Commands
ID Meaning
flow-label Flow label in the range 0 to 1048575
dst Packet destination IP address (host address or network address)
dst-wildcard
Destination IP address wildcard. It can be discontinuous, such as
0.255.0.32
fragment Packet fragment filtering.
precedence Packet precedence value (0 to 7)
range The layer 4 port number range of the packet.
time-range
tm-rng-name
Time range of packet filtering, named tm-rng-name
tos Type of service (0 to 15)
cos Class of service (0-7)
cos inner cos COS of the packet tag
icmp-type ICMP message type (0 to 255)
icmp-code ICMP message type code (0 to 255)
icmp-message ICMP message type name (0 to 255)
operator port [ port ]
Operator (lt-smaller, eq-equal, gt-greater, neq-unequal,
range-range)
port indicates the port number. Dyadic operation needs two port
numbers, while other operators only need one port number
src-mac-addr Physical address of the source host
dst-mac-addr Physical address of the destination host
VID vid
VLAN ID
VID inner vid VID of the tag
ethernet-type Ethernet protocol type. 0x value can be entered.
match-all tcpf
Match all bits of the TCP flag.
text Remark text
in Filter the incoming packets of the interface
out Filter the outgoing packets of the interface
{ rule mask offset }
+
rule: Hexadecimal value field; mask: Hexadecimal mask field
offset: Refer to the offset table
“+” sign indicates at least one group
The fields in the packet are as follows:
AA AA AA AA AA AA BB BB BB BB BB BB CC CC DD DD
DD DD EE FF GG HH HH HH II II JJ KK LL LL MM MM
NN NN OO PP QQ QQ RR RR RR RR SS SS SS SS TT TT