Switch 7700 Command reference Guide, v2.0

276 CHAPTER 7: USING QOS/ACL COMMANDS
[ precedence precedence ] [ tos tos ] [ dscp dscp ] [ fragment ] [
time-range name ]
undo rule rule-id [ source ] [ destination ] [ source-port ] [
destination-port ] [ precedence ] [ tos ] [ dscp ] [ fragment ] [
time-range ]
Define/delete a rule for interface acl:
rule [ rule-id ] { permit | deny } [ interface { interface-name |
interface-type interface-num | any } ] [ time-range name ]
undo rule rule-id
Define/delete a rule for link acl
rule [ rule-id ] { permit | deny } [ protocol-type ] [ format-type ]
ingress { { [ source-vlan-id ] [ source-mac-addr ] | any } egress { [
dest-mac-addr ] [ destination-vlan-id ] | any } [ time-range name ]
undo rule rule-id
View
ACL view
Parameter
rule-id: Specifies a rule of an ACL with a number in the range of 0 to 127.
permit: Indicates to let the matched packets through.
deny: Indicates to reject the matched packets to pass through.
time-range name: Name of a time range, during which a rule takes effect.
The following parameters are attributes carried by the data packets. The ACL rules
are defined according to the values of these parameters.
The parameter for define a basic ACL:
source-addr source-wildcard | any: source-addr source-wildcard is the
source IP address and source address wildcard, expressed in dotted decimal
notation.
any represents any source address.
fragment: Indicates that the rule takes effect on fragmented packets only and will
be ignored for other packets.
The parameter of advanced ACL:
protocol: This parameter is to define protocol type, which can be indicated by
name, or digit. This parameter can be icmp, igmp, tcp, udp, ip, gre, ospf or ipinip.
If this parameter takes ip, it means all the IP protocols. This parameter can be 1 ~
255 if indicated by digit.
source-addr source-wildcard | any: source-addr source-wildcard is the
source IP address and source address wildcard, expressed in dotted decimal
notation.
any represents any source address.