Owners manual

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide

Switch# configure terminal

Switch(config)# vlan access-map vlan-map 30

Switch(config-access-map)# match mac address ext_mac

Switch(config-access-map)# end

Switch# show vlan access-map

VLAN access-map vlan-map 20

match ip address: sp1(ID: 3999)

action: forward

VLAN access-map vlan-map 30

match mac address: ext_mac(ID: 7999)

action: forward

Switch#

4-17 permit | deny (expert access-list)

This command is used to add a permit or deny entry. Use the no command to remove an entry.

Extended Expert ACL:

[SEQUENCE-NUMBER] {permit | deny} PROTOCOL {SRC-IP-ADDR SRC-IP-WILDCARD | host

SRC-IP-ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any}

{DST-IP-ADDR DST-IP-WILDCARD | host DST-IP-ADDR | any} {DST-MAC-ADDR DST-MAC-

WILDCARD | host DST-MAC-ADDR | any} [cos OTER-COS] [vlan OUTER-VLAN] [fragments]

[[precedence PRECEDENCE] [tos TOS] | dscp DSCP] [time-range PROFILE-NAME]

[SEQUENCE-NUMBER] {permit | deny} tcp {SRC-IP-ADDR SRC-IP-WILDCARD | host SRC-IP-

ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any} [{eq | lt | gt |

neq} PORT | range MIN-PORT MAX-PORT] {DST-IP-ADDR DST-IP-WILDCARD | host DST-IP-

ADDR | any} {DST-MAC-ADDR DST-MAC-WILDCARD | host DST-MAC-ADDR | any} [{eq | lt | gt |

neq} PORT | range MIN-PORT MAX-PORT] [TCP-FLAG] [cos OUTER-COS] [vlan OUTER-VLAN]

[[precedence PRECEDENCE] [tos TOS] | dscp DSCP] [time-range PROFILE-NAME]

[SEQUENCE-NUMBER] {permit | deny} udp {SRC-IP-ADDR SRC-IP-WILDCARD | host SRC-IP-

ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any} [{eq | lt | gt |

neq} PORT | range MIN-PORT MAX-PORT] {DST-IP-ADDR DST-IP-WILDCARD | host DST-IP-

ADDR | any} {DST-MAC-ADDR DST-MAC-WILDCARD | host DST-MAC-ADDR | any} [{eq | lt | gt |

neq} PORT | range MIN-PORT MAX-PORT] [cos OUTER-COS] [vlan OUTER-VLAN] [[precedence

PRECEDENCE] [tos TOS] | dscp DSCP] [time-range PROFILE-NAME]

[SEQUENCE-NUMBER] {permit | deny} icmp {SRC-IP-ADDR SRC-IP-WILDCARD | host SRC-IP-

ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any} {DST-IP-

ADDR DST-IP-WILDCARD | host DST-IP-ADDR | any} {DST-MAC-ADDR DST-MAC-WILDCARD |

host DST-MAC-ADDR | any} [ICMP-TYPE [ICMP-CODE] | ICMP-MESSAGE] [cos OUTER-COS]

[vlan OUTER-VLAN] [[precedence PRECEDENCE] [tos TOS] | dscp DSCP] [time-range

PROFILE-NAME]

no SEQUENCE-NUMBER

Parameters

SEQUENCE-NUMBER

Specifies the sequence number. The range is from 1 to 65535. The

lower the number is, the higher the priority of the permit/deny rule.

cos OUTER-COS

(Optional) Specifies the outer priority value. This value must be

between 0 and 7.