Users Guide

730 Access Control Lists
continued • igmp-type igmp-type—When igmp-type is specified, the
IP ACL rule matches on the specified IGMP message
type (i.e., a number from 0 to 255).
• fragments
— Specifies the rule matches packets that are
non-initial fragments (fragment bit asserted). Not valid
for rules that match L4 information such as TCP port
number since that information is carried in the initial
packet. This keyword is also not valid for IPv6 packets
since they should never be fragmented.
• log
— Specifies that this rule is to be logged.
• time-range time-range-name—Allows imposing time
limitation on the ACL rule as defined by the parameter
time-range-name. If a time range with the specified name
does not exist and the ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the
ACL rule is applied immediately. If a time range with
specified name exists and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, then
the ACL rule is applied when the time-range with
specified name becomes active. The ACL rule is removed
when the time-range with specified name becomes
inactive.
• assign-queue queue-id—Specifies the assign-queue,
which is the queue identifier to which packets matching
this rule are assigned.
•
{ mirror | redirect } interface —Specifies the mirror or
redirect interface which is the interface ID to which
packets matching this rule are copied or forwarded,
respectively.
• rate-limit
rate burst-size —Specifies the allowed rate of
traffic as per the configured rate in kbps, and burst-size in
kbytes.
– Rate – the committed rate in kilobits per second
– Burst-size – the committed burst size in Kilobytes.
• routing - indicates a packet that is routed.
Command Purpose