SNR S2940-8G-v2, Руководство по настройке

Страница: 284 / 420

SNR S2940-8G-v2 Switch Configuration Guide
ACL Configuration
[no] { deny | permit } tcp { { <sIpAddr> <sMask>
} | any-source | { host-source <sIpAddr> } }
[s-port { <sPort> | range <sPortMin> <sPort-
Max> } ] { { <dIpAddr> <dMask> } | any-
destination | { host-destination <dIpAddr> } } [d-
port { <dPort> | range <dPortMin> <dPortMax> } ]
[ack+fin+psh+rst+urg+syn] [precedence <prec>]
[tos <tos>][time-range<time-range-name>] Creates an extended name-based TCP IP
access rule; the no form command deletes
this name-based extended IP access rule.
[no] { deny | permit } udp { { <sIpAddr> <sMask> }
| any-source | { host-source <sIpAddr> } } [s-port
{ <sPort> | range <sPortMin> <sPortMax> } ] { {
<dIpAddr> <dMask> } | any-destination | { host-
destination <dIpAddr> } } [d-port { <dPort> | range
<dPortMin> <dPortMax> } ] [precedence <prec>]
[tos <tos>][time-range<time-range-name>] Creates an extended name-based UDP IP
access rule; the no form command deletes
this name-based extended IP access rule.
[no] { deny | permit } { eigrp | gre | igrp | ipinip | ip
| ospf | <protocol-num> } { { <sIpAddr> <sMask>
} | any-source | { host-source <sIpAddr> } } { {
<dIpAddr> <dMask> } | any-destination | { host-
destination <dIpAddr> } } [precedence <prec>]
[tos <tos>][time-range<time-range-name>] Creates an extended name-based IP ac-
cess rule for other IP protocols; the no
form command deletes this name-based
extended IP access rule.
iii. Exit extended IP ACL configuration mode
Command Explanation
Extended IP ACL Mode
exit Exits extended name-based IP ACL config-
uration mode.
(e) Configuring a numbered standard MAC access-list
Command Explanation
Global Mode
access-list<num> { deny | permit } { any-source-
mac | { host-source-mac<host_smac> } | {
<smac><smac-mask> } }
no access-list <num> Creates a numbered standard MAC
access-list, if the access-list already ex-
ists, then a rule will add to the current
access-list;
the 'no access-list <num>'
command deletes a numbered standard
MAC access-list.
284