Command Reference Guide

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (AOS) 142
Table 162 Ethernet Filter Configuration Menu options
Command
Description
smac <MAC address> <MAC mask>
Defines the source MAC address and MAC mask for this ACL. For
example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
dmac <MAC address> <MAC mask>
Defines the destination MAC address and MAC mask for this ACL.
For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
vlan <1-4095> <VLAN mask (0xfff)>
Defines a VLAN number and mask for this ACL.
etype
ARP|IP|IPv6|MPLS|RARP|any|0xXXXX
Defines the Ethernet type for this ACL.
pri <0-7>
Defines the Ethernet priority value for the ACL.
reset
Resets Ethernet parameters for the ACL to their default values.
cur
Displays the current Ethernet parameters for the ACL.
ACL IP Version 4 Filter configuration
Command: /cfg/acl/acl <ACL number>/ipv4
[Filtering IPv4 Menu]
sip - Set to filter on source IP address
dip - Set to filter on destination IP address
proto - Set to filter on protocol
tos - Set to filter on TOS
reset - Reset all fields
cur - Display current parameters
This menu allows you to define IPv4 matching criteria for an ACL. The following table describes the IP version 4
Filter Configuration Menu options.
Table 163 IPv4 Filter Configuration Menu options
Command
Description
sip <IP address> <IP mask>
Defines a source IP address for the ACL. If defined, traffic with this source
IP address will match this ACL. Specify an IP address in dotted decimal
notation. For example, 100.10.1.1
dip <IP address> <IP mask>
Defines a destination IP address for the ACL. If defined, traffic with this
destination IP address will match this ACL. For example, 100.10.1.2
proto <0-255>
Defines an IP protocol for the ACL. If defined, traffic from the specified
protocol matches this filter. Specify the protocol number. Listed below are
some of the well-known protocols.
Number Name
1 icmp
2 igmp
6 tcp
17 udp
89 ospf
112 vrrp
tos <0-255>
Defines a Type of Service value for the ACL. For more information on
ToS, see RFC 1340 and 1349.
reset
Resets the IPv4 parameters for the ACL to their default values.
cur
Displays the current IPV4 parameters.
ACL TCP/UDP Filter configuration
Command: /cfg/acl/acl <ACL number>/tcpudp
[Filtering TCP/UDP Menu]
sport - Set to filter on TCP/UDP source port
dport - Set to filter on TCP/UDP destination port
flags - Set to filter TCP/UDP flags
reset - Reset all fields
cur - Display current parameters
This menu allows you to define TCP/UDP matching criteria for an ACL. The following table describes the TCP/UDP
Filter Configuration Menu options.