Command Reference Guide

Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 146
This menu allows you to define Ethernet matching criteria for an ACL. The following table describes the
Ethernet Filter Configuration Menu options.
Table 163 Ethernet Filter Configuration Menu options
Command
Description
smac <MAC address> <MAC mask>
Defines the source MAC address and MAC mask for this ACL.
For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
dmac <MAC address> <MAC mask>
Defines the destination MAC address and MAC mask for this
ACL. For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
vlan <1-4095> <VLAN mask (0xfff)>
Defines a VLAN number and mask for this ACL.
etype
ARP|IP|IPv6|MPLS|RARP|any|0xXXXX
Defines the Ethernet type for this ACL.
pri <0-7>
Defines the Ethernet priority value for the ACL.
reset
Resets Ethernet parameters for the ACL to their default values.
cur
Displays the current Ethernet parameters for the ACL.
ACL IP Version 4 Filter configuration
Command: /cfg/acl/acl <ACL number>/ipv4
[Filtering IPv4 Menu]
sip - Set to filter on source IP address
dip - Set to filter on destination IP address
proto - Set to filter on protocol
tos - Set to filter on TOS
reset - Reset all fields
cur - Display current parameters
This menu allows you to define IPv4 matching criteria for an ACL. The following table describes the IP
version 4 Filter Configuration Menu options.
Table 164 IPv4 Filter Configuration Menu options
Command
Description
sip <IP address> <IP mask>
Defines a source IP address for the ACL.
dip <IP address> <IP mask>
Defines a destination IP address for the ACL.
proto <0-255>
Defines an IP protocol for the ACL. If defined, traffic from the
specified protocol matches this filter. Specify the protocol number.
Listed below are some of the well-known protocols.
Number Name
1 icmp
2 igmp
6 tcp
17 udp
89 ospf
112 vrrp
tos <0-255>
Defines a Type of Service value for the ACL. For more information
on ToS, see RFC 1340 and 1349.
reset
Resets the IPv4 parameters for the ACL to their default values.
cur
Displays the current IPV4 parameters.
ACL TCP/UDP Filter configuration
Command: /cfg/acl/acl <ACL number>/tcpudp
[Filtering TCP/UDP Menu]
sport - Set to filter on TCP/UDP source port
dport - Set to filter on TCP/UDP destination port
flags - Set to filter TCP/UDP flags
reset - Reset all fields
cur - Display current parameters
This menu allows you to define TCP/UDP matching criteria for an ACL. The following table describes the
TCP/UDP Filter Configuration Menu options.