174
Command:
destination ip host IPADDR
3. Filter a range of source IP address.
Command:
source ip IPADDR IPADDR
The second IPADDR is a mask, for example: 255.255.0.0
4. Filter a range of destination IP address.
Command:
destination ip IPADDR IPADDR
L4 ACL Support:
1. Filter a UDP/TCP source port.
2. Filter a UDP/TCP destination port.
Default Settings
Maximum profile
: 64.
Maximum profile name length : 16.
Notices
The ACL name should be the combination of the digit or the alphabet.
7.2.2.
CLI Configuration
Node
Command
Description
enable
show access-list
This command displays all of the access control
profiles.
configure access-list STRING
ip-type (ipv4|ipv6)
This command creates a new access control profile.
Where the STRING is the profile name. And you can
specify the type, ipv4 or ipv6.
configure no access-list
STRING
This command deletes an access control profile.
acl
show
This command displays the current access control
profile.
acl
action
(disable|drop|permit)
This command actives this profile.
disable – disable the profile.
drop – If packets match the profile, the packets will be
dropped.
permit – If packets match the profile, the packets will be
forwarded.
acl
action dscp remarking
<0-63>
This command actives this profile and specify that it is
for DSCP remark. And configures the new DSCP value
which will be override to all packets matched this
profile.
acl
action 802.1p
remarking <0-7>
This command actives this profile and specify that it is
for 802.1p remark. And configures the new 802.1p
value which will be override to all packets matched this
profile.
acl
802.1p VALUE
This command configures the 802.1p value for the
profile.
acl
dscp VALUE
This command configures the DSCP value for the
