TP-Link T1500-28PCT TL-SL2428P T1500-28PCT V1 CLI Reference Guide - Page 125

access-list combined, Description, Syntax, Parameter

Page 125 highlights

T1500-28PCT(config)# access-list extended 220 rule 11 permit sip 192.168.0.100 smask 255.255.255.0 access-list combined Description The access-list combined command is used to add a Combined ACL rule. The filtering conditions include the source MAC addresses, destination MAC addresses, source IP addresses and destination IP addresses carried in the packets. To delete the corresponding rule, please use no access-list combined command. Syntax access-list combined acl-id rule rule-id { deny | permit } [[ smac source-mac ] smask source-mac-mask ] [[ dmac destination-mac ] dmask destination-mac-mask ] [[ sip source-ip ] sip-mask source-ip-mask ] [[ dip destination-ip ] dip-mask destination-ip-mask ] no access-list combined acl-id rule rule-id Parameter acl-id--The desired CombinedACL for configuration. rule-id -- The rule ID. deny -- The operation to discard packets. permit --The operation to forward packets. It is the default value. source-mac -- The source MAC address contained in the rule. source-mac-mask -- The source MAC address mask. It is required if you typed the source MAC address. destination-mac -- The destination MAC address contained in the rule. destination-mac-mask -- The destination MAC address mask. It is required if you typed the destination MAC address. source-ip -- The source IP address contained in the rule. source-ip-mask -- The source IP address mask. It is required if you typed the source IP address. destination-ip -- The destination IP address contained in the rule. destination-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. 114

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200

114
T1500-28PCT(config)# access-list extended
220
rule
11 permit
sip
192.168.0.100
smask
255.255.255.0
access-list combined
Description
The
access-list combined
command is used to add a Combined ACL rule. The
filtering conditions include the source MAC addresses, destination MAC
addresses, source IP addresses and destination IP addresses carried in the
packets. To delete the corresponding rule, please use
no access-list
combined
command.
Syntax
access-list combined
acl-id
rule
rule-id
{ deny | permit } [[
smac
source-ma
c ]
smask
source-mac-mask
]
[[
dmac
destination-mac
]
dmask
destination-mac-mask
] [[
sip
source-ip ]
sip-mask
source-ip-mask ] [[
dip
destination-ip ]
dip-mask
destination-ip-mask
]
no access-list combined
acl-id
rule
rule-id
Parameter
acl-id
——The desired Combined ACL for configuration.
rule-id
—— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
source-mac
—— The source MAC address contained in the rule.
source-mac-mask
—— The source MAC address mask. It is required if you
typed the source MAC address.
destination-mac
—— The destination MAC address contained in the rule.
destination-mac-mask
—— The destination MAC address mask. It is required if
you typed the destination MAC address.
source-ip
—— The source IP address contained in the rule.
source-ip-mask
—— The source IP address mask. It is required if you typed the
source IP address.
destination-ip
—— The destination IP address contained in the rule.
destination-ip-mask
—— The destination IP address mask. It is required if you
typed the destination IP address.