Ruijie RG-S29 Series, Справочник по командам

Страница: 1292 / 1510

Command Reference ACL Commands
precedence Packet precedence value (0 to 7)
range The layer 4 port number range of the packet.
time-range tm-rng-name Time range of packet filtering, named tm-rng-name
tos Type of service (0 to 15)
cos Class of service (0-7)
cos inner cos COS of the packet tag
icmp-type ICMP message type (0 to 255)
icmp-code ICMP message type code (0 to 255)
icmp-message ICMP message type name (0 to 255)
operator port[port]
Operator (lt-smaller, eq-equal, gt-greater, neq-unequal, range-range)
port indicates the port number. Dyadic operation needs two port numbers,
while other operators only need one port number
src-mac-addr Physical address of the source host
dst-mac-addr Physical address of the destination host
VID vid VLAN ID
VID inner vid VID of the tag
ethernet-type Ethernet protocol type. 0x value can be entered.
match-all tcpf Match all bits of the TCP flag.
established Match the RST or ACK bit of the TCP flag.
text Remark text
in Filter the incoming packets of the interface
out Filter the outgoing packets of the interface
{rule mask offset}
+
rule: Hexadecimal value field; mask: Hexadecimal mask field
offset: Refer to the offset table
“+” sign indicates at least one group
log Output the matching syslog when the packet matches the ACL rule.
Letter Meaning Offset Letter Meaning Offset
A Destination MAC 0 O TTL field 34
B Source MAC 6 P Protocol number 35
C Data frame length field 12 Q IP check sum 36
D VLAN tag field 14 R Source IP address 38
E
DSAP (Destination Service
Access Point) field
18 S Destination IP address 42
F
SSAP (Source Service Access
Point) field
19 T TCP source port 46
G Ctrl field 20 U TCP destination port 48