Ruijie RG-S2600G-I Series, Справочное руководство CLI

Страница: 907 / 1192

CLI Reference Guide ACL Configuration Commands
tos Specify type of service.
tos ToS value (0 to 15)
icmp-type ICMP message type (0 to 255)
icmp-code ICMP message type code (0 to 255)
icmp-message ICMP message type name
operator Operator (lt-smaller, eq-equal, gt-greater, neq-unequal, range-range)
port [ port ]
Port number; range needs two port numbers, while other operators
only need one port number.
host source-mac-address Source physical address
host
destination-mac-address
Destination physical address
VID vid
Match the specified VID.
ethernet-type Ethernet type
match-all Match all the bits of the TCP flag.
tcp-flag Match the TCP flag.
established
Match the RST or ACK bits, not other bits of the TCP flag.
text Remark information
Defaults None
Command
Mode
Global configuration mode.
Usage Guide To filter the data by using the access control list, you must first define a series of rule statements by
using the access list. You can use ACLs of the appropriate types according to the security needs:
The standard IP ACL (1 to 99, 1300 to 1999) only controls the source IP addresses.
The extended IP ACL (100 to 199, 2000 to 2699) can enforce strict control over the source and
destination IP addresses.
The extended MAC ACL (700 to 799) can match against the source/destination MAC addresses and
Ethernet type.
The extended expert access list (2700 to 2899) is a combination of the above and can match and filter
the VLAN ID.
For the layer-3 routing protocols including the unicast routing protocol and multicast routing protocol,
the following parameters are not supported by the ACL: precedence precedence / tos
tos / fragments / range lower upper/ time-range time-range-name
The TCP Flag includes part or all of the following:

urg

ack

psh

rst

syn

fin
The packet precedence is as below:

critical