SMC Networks Edge-core ES4704BD, Руководство пользователя

Страница: 765 / 859

765
from the back of source MAC, and the windows cannot superpose each other, and that is
to say: Offset(x
＋ 1) must
be longer than
Offset(x) ＋ len （ x ） ;
Length(x)
length is 1-4 ,
and
Offset(x)
＋
Length(x) should not be longer than 80
（
currently should not be
longer than 64
）
; Value(x) hex expression, Value range
: when
Length(x)
=1, it is 0-ff ,
when
Length(x)
=2, it is 0-ffff , when
Length(x)
=3, it is0-ffffff, when
Length(x)
=4, it is
0-ffffffff ;
For
Offset(x),
different types of data frames are with different value ranges:
for untagged-eth2 type frame: <12
～
52>
for untagged-802.2 type frame: <12
～
60>
for untagged-eth2 type frame: <12 ～ 56>
for untagged-eth2 type frame: <12
～
64>
Command Mode:
Global mode
Default Configuration :
No access-list configured
Usage Guide
: When the user assign specific
<num>
for the first time, ACL of the serial
number is created, then the lists are added into this ACL.
Examples:
Permit tagged-eth2 with any source MAC addresses and any destination
MAC addresses and the packets whose 15
th
and 16
th
byte is 0x08 , 0x0 to pass, and
Switch(Config)#access-list 1100 permit any-source-mac any-destination-mac tagged-eth2
14 2 0800
19.2.2.6 access-list(mac-ip extended)
Command:
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}icmp
{{<source><source-wildcard>}|any|{host<source-host-ip>}}
{{<destination><destination-wildcard>}|any-destination|
{host-destination<destination-host-ip>}}[<icmp-type> [<icmp-code>]] [precedence
<precedence>] [tos <tos>][time-range<time-range-name>]
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}igmp
{{<source><source-wildcard>}|any|{host<source-host-ip>}}
{{<destination><destination-wildcard>}|any-destination|
{host-destination<destination-host-ip>}} [<igmp-type>] [precedence <precedence>]
[tos <tos>][time-range<time-range-name>]