Home » TP-Link Manuals » Hubs & Switches » TP-Link T1500-28PCT » Manual Viewer

TP-Link T1500-28PCT T1500-28PCTTL-SL2428PUN V3 CLI Reference Guide Guide - Page 336

access-list combined

View all TP-Link T1500-28PCT manuals

Add to My Manuals
Save this manual to your list of manuals

Page 336 highlights

tos-value --Specify an IP ToS value to be matched between 0 and 15. pre-value --Specify an IP Precedence value to be matched between 0 and 7. protocol -- Specify a protocol type. s-port-number -- Specify the source port number. s-port-mask -- Specify the source port mask with 4 hexadecimal numbers. d-port-number -- Specify the destination port number. d-port-mask -- Specify the destination port mask with 4 hexadacimal numbers. tcpflag -- For TCP protocol, specify the flag value using either binary numbers or * (for Example, 01*010*). The default is *, which indicates that the flag will not be matched. The flags are URG (Urgent flag), ACK (acknowledge flag), PSH(push flag), RST(reset flag),SYN(synchronize flag), and FIN(finish flag). time-range-name -- The name of the time-range. The default is No Limit. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create IP ACL 600, and configure Rule 1 to permit packets with source IP address 192.168.1.100: Switch (config)#access-list create 600 Switch (config)#access-list ip 600 rule 1 permit logging disable sip 192.168.1.100 sip-mask 255.255.255.255 37.5 access-list combined Description The access-list combined command is used to add Combined ACL rule. To delete the corresponding rule, please use no access-list extended command. 317

Section	Page
Preface	20
Chapter 1 Using the CLI	24
1.1 Accessing the CLI	24
1.1.1 Logon by Telnet	24
1.1.2 Logon by SSH	25
1.2 CLI Command Modes	30
1.3 Privilege Restrictions	33
1.4 Conventions	34
1.4.1 PoE Disclaimer	34
1.4.2 Format Conventions	34
1.4.3 Special Characters	34
1.4.4 Parameter Format	34
Chapter 2 User Interface	36
2.1 enable	36
2.2 service password-encryption	36
2.3 enable password	37
2.4 enable secret	38
2.5 configure	39
2.6 exit	40
2.7 end	40
2.8 clipaging	41
2.9 history	41
2.10 history clear	42
Chapter 3 User Management Commands	43
3.1 user name (password)	43
3.2 user name (secret)	44
3.3 show user account-list	45
3.4 show user configuration	46
Chapter 4 System Configuration Commands	47
4.1 system-time manual	47
4.2 system-time ntp	47
4.3 system-time dst predefined	49
4.4 system-time dst date	50
4.5 system-time dst recurring	51
4.6 hostname	52
4.7 location	53
4.8 contact-info	53
4.9 service led (Only for Certain Devices)	54
4.10 led (Only for Certain Devices)	54
4.11 ip address	55
4.12 ip management-vlan	56
4.13 ip address-alloc	56
4.14 controller cloud-based (Only for Certain Devices)	57
4.15 controller inform-url (Only for Certain Devices)	58
4.16 reset	59
4.17 service reset-disable	59
4.18 reboot	60
4.19 reboot-schedule	60
4.20 copy running-config startup-config	61
4.21 copy startup-config tftp	62
4.22 copy tftp startup-config	62
4.23 copy backup-config tftp	63
4.24 copy backup-config startup-config	64
4.25 copy running-config backup-config	64
4.26 copy tftp backup-config	65
4.27 boot application	65
4.28 boot config	66
4.29 remove backup-image	67
4.30 firmware upgrade	67
4.31 ping	68
4.32 tracert	69
4.33 show system-info	70
4.34 show image-info	71
4.35 show boot	71
4.36 show running-config	72
4.37 show startup-config	73
4.38 show system-time	73
4.39 show system-time dst	74
4.40 show system-time ntp	74
4.41 show cable-diagnostics interface	75
4.42 show cpu-utilization	75
4.43 show memory-utilization	76
4.44 show controller (Only for Certain Devices)	76
Chapter 5 EEE Configuration Commands	78
5.1 eee	78
5.2 show interface eee	78
Chapter 6 SDM Template Commands	80
6.1 sdm prefer	80
6.2 show sdm prefer	81
Chapter 7 Time Range Commands	82
7.1 time-range	82
7.2 absolute	82
7.3 periodic	83
7.4 holiday (time-range mode)	84
7.5 holiday	85
7.6 show holiday	85
7.7 show time-range	86
Chapter 8 Port Configuration Commands	87
8.1 interface gigabitEthernet	87
8.2 interface range gigabitEthernet	87
8.3 Description	89
8.4 shutdown	89
8.5 flow-control	90
8.6 duplex	91
8.7 jumbo-size	91
8.8 speed	92
8.9 serdes-mode (Only for Certain Devices)	93
8.10 clear counters	93
8.11 show interface status	94
8.12 show interface counters	94
8.13 show interface configuration	95
Chapter 9 Port Isolation Commands	97
9.1 port isolation	97
9.2 show port isolation interface	98
Chapter 10 Loopback Detection Commands	99
10.1 loopback-detection (global)	99
10.2 loopback-detection interval	99
10.3 loopback-detection recovery-time	100
10.4 loopback-detection (interface)	101
10.5 loopback-detection config process-mode	101
10.6 loopback-detection recover	102
10.7 show loopback-detection global	103
10.8 show loopback-detection interface	103
Chapter 11 Etherchannel Commands	105
11.1 channel-group	105
11.2 port-channel load-balance	106
11.3 lacp system-priority	107
11.4 lacp port-priority	108
11.5 show etherchannel	108
11.6 show etherchannel load-balance	109
11.7 show lacp	110
11.8 show lacp sys-id	110
Chapter 12 MAC Address Commands	112
12.1 mac address-table static	112
12.2 no mac address-table dynamic	113
12.3 mac address-table aging-time	113
12.4 mac address-table filtering	114
12.5 mac address-table max-mac-count	115
12.6 show mac address-table	116
12.7 clear mac address-table	117
12.8 show mac address-table aging-time	117
12.9 show mac address-table max-mac-count	118
12.10 show mac address-table interface	118
12.11 show mac address-table count	119
12.12 show mac address-table address	119
12.13 show mac address-table vlan	120
Chapter 13 IEEE 802.1Q VLAN Commands	121
13.1 vlan	121
13.2 name	122
13.3 vlan_trunk (globally)	122
13.4 vlan_trunk (interface)	123
13.5 switchport general allowed vlan	123
13.6 switchport pvid	124
13.7 switchport check ingress	125
13.8 switchport acceptable frame	126
13.9 show vlan summary	126
13.10 show vlan brief	127
13.11 show vlan	127
13.12 show interface switchport	128
Chapter 14 MAC-based VLAN Commands	129
14.1 mac-vlan mac-address	129
14.2 mac-vlan	130
14.3 show mac-vlan	130
14.4 show mac-vlan interface	131
Chapter 15 Protocol-based VLAN Commands	132
15.1 protocol-vlan template	132
15.2 protocol-vlan vlan	133
15.3 protocol-vlan group	134
15.4 show protocol-vlan template	135
15.5 show protocol-vlan vlan	135
Chapter 16 GVRP Commands	136
16.1 gvrp	136
16.2 gvrp (interface)	136
16.3 gvrp registration	137
16.4 gvrp timer	138
16.5 show gvrp interface	139
16.6 show gvrp global	140
Chapter 17 IGMP Snooping Commands	141
17.1 ip igmp snooping (global)	141
17.2 ip igmp snooping version	141
17.3 ip igmp snooping drop-unknown	142
17.4 ip igmp snooping header-validation	143
17.5 ip igmp snooping vlan-config	143
17.6 ip igmp snooping vlan-config (immediate-leave)	145
17.7 ip igmp snooping vlan-config (report-suppression)	145
17.8 ip igmp snooping vlan-config (router-ports-forbidden)	146
17.9 ip igmp snooping vlan-config (rport interface)	147
17.10 ip igmp snooping vlan-config (static)	148
17.11 ip igmp snooping vlan-config (querier)	149
17.12 ip igmp snooping (interface)	150
17.13 ip igmp snooping max-groups	151
17.14 ip igmp snooping immediate-leave	152
17.15 ip igmp profile	152
17.16 deny	153
17.17 permit	153
17.18 range	154
17.19 ip igmp filter	155
17.20 clear ip igmp snooping statistics	155
17.21 show ip igmp snooping	156
17.22 show ip igmp snooping interface	156
17.23 show ip igmp snooping vlan	157
17.24 show ip igmp snooping groups	158
17.25 show ip igmp profile	159
Chapter 18 MLD Snooping Commands	160
18.1 ipv6 mld snooping (global)	160
18.2 ipv6 mld snooping drop-unknown	160
18.3 ipv6 mld snooping vlan-config	161
18.4 ipv6 mld snooping vlan-config (immediate-leave)	162
18.5 ipv6 mld snooping vlan-config (report-suppression)	163
18.6 ipv6 mld snooping vlan-config (router-ports-forbidden)	164
18.7 ipv6 mld snooping vlan-config (rport interface)	165
18.8 ipv6 mld snooping vlan-config (static)	165
18.9 ipv6 mld snooping vlan-config (querier)	167
18.10 ipv6 mld snooping (interface)	168
18.11 ipv6 mld snooping max-groups	169
18.12 ipv6 mld snooping immediate-leave	170
18.13 ipv6 mld profile	170
18.14 deny	171
18.15 permit	171
18.16 range	172
18.17 ipv6 mld filter	173
18.18 clear ipv6 mld snooping statistics	173
18.19 show ipv6 mld snooping	174
18.20 show ipv6 mld snooping interface	174
18.21 show ipv6 mld snooping vlan	175
18.22 show ipv6 mld snooping groups	176
18.23 show ipv6 mld profile	176
Chapter 19 MVR Commands	178
19.1 mvr (global)	178
19.2 mvr group	178
19.3 mvr mode	179
19.4 mvr querytime	180
19.5 mvr vlan	181
19.6 mvr (interface)	181
19.7 mvr type	182
19.8 mvr immediate	183
19.9 mvr vlan (group)	183
19.10 show mvr	184
19.11 show mvr interface	185
19.12 show mvr members	185
Chapter 20 MSTP Commands	187
20.1 debug spanning-tree	187
20.2 spanning-tree (global)	188
20.3 spanning-tree (interface)	188
20.4 spanning-tree common-config	189
20.5 spanning-tree mode	190
20.6 spanning-tree mst configuration	191
20.7 instance	192
20.8 name	192
20.9 revision	193
20.10 spanning-tree mst instance	194
20.11 spanning-tree mst	194
20.12 spanning-tree priority	195
20.13 spanning-tree timer	196
20.14 spanning-tree hold-count	197
20.15 spanning-tree max-hops	197
20.16 spanning-tree bpdufilter	198
20.17 spanning-tree bpduflood	199
20.18 spanning-tree bpduguard	199
20.19 spanning-tree guard loop	200
20.20 spanning-tree guard root	201
20.21 spanning-tree guard tc	201
20.22 spanning-tree mcheck	202
20.23 show spanning-tree active	203
20.24 show spanning-tree bridge	203
20.25 show spanning-tree interface	204
20.26 show spanning-tree interface-security	204
20.27 show spanning-tree mst	205
Chapter 21 LLDP Commands	207
21.1 lldp	207
21.2 lldp forward_message	207
21.3 lldp hold-multiplier	208
21.4 lldp timer	209
21.5 lldp receive	210
21.6 lldp transmit	210
21.7 lldp snmp-trap	211
21.8 lldp tlv-select	212
21.9 lldp management-address	212
21.10 lldp med-fast-count	213
21.11 lldp med-status	214
21.12 lldp med-tlv-select	214
21.13 lldp med-location	215
21.14 show lldp	216
21.15 show lldp interface	216
21.16 show lldp local-information interface	217
21.17 show lldp neighbor-information interface	218
21.18 show lldp traffic interface	218
Chapter 22 IPv6 Address Configuration Commands	220
22.1 ipv6 enable	220
22.2 ipv6 address autoconfig	220
22.3 ipv6 address link-local	221
22.4 ipv6 address dhcp	222
22.5 ipv6 address ra	222
22.6 ipv6 address eui-64	223
22.7 ipv6 address	224
22.8 ipv6 gateway	225
22.9 show ipv6 interface	225
Chapter 23 DHCP Relay Commands	226
23.1 service dhcp relay	226
23.2 ip dhcp relay hops	226
23.3 ip dhcp relay time	227
23.4 ip dhcp relay vlan	228
23.5 ip dhcp relay information	228
23.6 ip dhcp relay information strategy	229
23.7 ip dhcp relay information format	230
23.8 ip dhcp relay information circuit-id	231
23.9 ip dhcp relay information remote-id	231
23.10 ip dhcp relay default-interface	232
23.11 show ip dhcp relay	233
Chapter 24 DHCP L2 Relay Commands	234
24.1 ip dhcp l2relay	234
24.2 ip dhcp l2relay vlan	234
24.3 ip dhcp l2relay information	235
24.4 ip dhcp l2relay information strategy	235
24.5 ip dhcp l2relay information format	236
24.6 ip dhcp l2relay information circuit-id	237
24.7 ip dhcp l2relay information remote-id	238
24.8 show ip dhcp l2relay	238
24.9 show ip dhcp l2relay interface	239
Chapter 25 QoS Commands	240
25.1 qos trust mode	240
25.2 qos port-priority	241
25.3 qos cos-map	241
25.4 qos dot1p-remap	242
25.5 qos dscp-map	243
25.6 qos dscp-remap	244
25.7 qos queue mode	244
25.8 show qos cos-map	245
25.9 show qos dot1p-remap	246
25.10 show qos dscp-map	246
25.11 show qos dscp-remap	247
25.12 show qos port-priority interface	247
25.13 show qos trust interface	248
25.14 show qos queue interface	248
Chapter 26 Bandwidth Control Commands	250
26.1 storm-control rate-mode	250
26.2 storm-control	251
26.3 storm-control exceed	252
26.4 storm-control recover	252
26.5 bandwidth	253
26.6 show storm-control	254
26.7 show bandwidth	254
Chapter 27 Voice VLAN Commands	256
27.1 voice vlan	256
27.2 voice vlan (interface)	256
27.3 voice vlan priority	257
27.4 voice vlan oui	258
27.5 show voice vlan	258
27.6 show voice vlan oui-table	259
27.7 show voice vlan interface	259
Chapter 28 Auto VoIP Commands	261
28.1 auto-voip	261
28.2 auto-voip (interface)	261
28.3 auto-voip dot1p	262
28.4 auto-voip untagged	263
28.5 auto-voip none	263
28.6 no auto-voip (interface)	264
28.7 auto-voip dscp	264
28.8 auto-voip data priority	265
28.9 show auto-voip	266
Chapter 29 Access Control Commands	267
29.1 user access-control ip-based enable	267
29.2 user access-control ip-based	267
29.3 user access-control mac-based enable	268
29.4 user access-control mac-based	269
29.5 user access-control port-based enable	270
29.6 user access-control port-based	270
Chapter 30 HTTP and HTTPS Commands	272
30.1 ip http server	272
30.2 ip http port	273
30.3 ip http max-users	273
30.4 ip http session timeout	274
30.5 ip http secure-server	275
30.6 ip http secure-port	275
30.7 ip http secure-protocol	276
30.8 ip http secure-ciphersuite	277
30.9 ip http secure-max-users	278
30.10 ip http secure-session timeout	279
30.11 ip http secure-server download certificate	279
30.12 ip http secure-server download key	280
30.13 show ip http configuration	281
30.14 show ip http secure-server	282
Chapter 31 SSH Commands	283
31.1 ip ssh server	283
31.2 ip ssh port	283
31.3 ip ssh version	284
31.4 ip ssh algorithm	285
31.5 ip ssh timeout	285
31.6 ip ssh max-client	286
31.7 ip ssh download	287
31.8 remove public-key	287
31.9 show ip ssh	288
Chapter 32 Telnet Commands	289
32.1 telnet	289
32.2 telnet enable	289
32.3 telnet port	290
32.4 show telnet-status	290
Chapter 33 AAA Commands	292
33.1 tacacas-server host	292
33.2 show tacacs-server	293
33.3 radius-server host	294
33.4 show radius-server	295
33.5 aaa group	296
33.6 server	297
33.7 show aaa group	297
33.8 aaa authentication login	298
33.9 aaa authentication enable	299
33.10 aaa authentication dot1x default	300
33.11 aaa accounting dot1x default	301
33.12 show aaa authentication	301
33.13 show aaa accounting	302
33.14 line telnet	302
33.15 login authentication (telnet)	303
33.16 line ssh	304
33.17 login authentication (ssh)	304
33.18 enable authentication (telnet)	305
33.19 enable authentication (ssh)	306
33.20 ip http login authentication	306
33.21 ip http enable authentication	307
33.22 show aaa global	308
33.23 enable admin password	308
33.24 enable admin secret	309
33.25 enable-admin	310
Chapter 34 IEEE 802.1x Commands	312
34.1 dot1x system-auth-control	312
34.2 dot1x handshake	313
34.3 dot1x auth-protocol	313
34.4 dot1x vlan-assignment	314
34.5 dot1x accounting	315
34.6 dot1x mab	316
34.7 dot1x guest-vlan	316
34.8 dot1x timeout quiet-period	317
34.9 dot1x timeout supp-timeout	318
34.10 dot1x max- req	319
34.11 dot1x	319
34.12 dot1x port-control	320
34.13 dot1x port-method	321
34.14 dot1x auth-init	322
34.15 dot1x auth-reauth	322
34.16 show dot1x global	323
34.17 show dot1x interface	324
34.18 show dot1x auth-state	324
Chapter 35 Port Security Commands	326
35.1 mac address-table max-mac count	326
35.2 show mac address-table max-mac-count	326
Chapter 36 Port Mirroring Commands	328
36.1 monitor session destination interface	328
36.2 monitor session source	329
36.3 show monitor session	330
Chapter 37 ACL Commands	332
37.1 access-list create	332
37.2 access-list resequence	332
37.3 access-list mac	333
37.4 access-list ip	335
37.5 access-list combined	336
37.6 access-list ipv6	338
37.7 access-list action	340
37.8 redirect	341
37.9 s-condition	342
37.10 s-mirror	342
37.11 qos-remark	343
37.12 access bind	344
37.13 show access-list	345
37.14 show access-list bind	345
37.15 show access-list status	346
37.16 show access-list counter	346
37.17 clear access-list	347
Chapter 38 IPv4 IMPB Commands	348
38.1 ip source binding	348
38.2 ip dhcp snooping	349
38.3 ip dhcp snooping vlan	350
38.4 ip dhcp snooping max-entries	350
38.5 show ip source binding	351
38.6 show ip dhcp snooping	352
38.7 show ip dhcp snooping interface	352
Chapter 39 IPv6 IMPB Commands	354
39.1 Ipv6 source binding	354
39.2 ipv6 dhcp snooping	355
39.3 ipv6 dhcp snooping vlan	356
39.4 ipv6 dhcp snooping max-entries	356
39.5 ipv6 nd snooping	357
39.6 ipv6 nd snooping vlan	358
39.7 ipv6 nd snooping max-entries	358
39.8 show ipv6 source binding	359
39.9 show ipv6 dhcp snooping	360
39.10 show ipv6 dhcp snooping interface	360
39.11 show ipv6 nd snooping	361
39.12 show ipv6 nd snooping interface	362
Chapter 40 IP Verify Source Commands	363
40.1 ip verify source	363
40.2 ip verify source logging	364
40.3 show ip verify source	364
40.4 show ip verify source interface	365
Chapter 41 IPv6 Verify Source Commands	366
41.1 ipv6 verify source	366
41.2 show ipv6 verify source	367
41.3 show ipv6 verify source interface	367
Chapter 42 DHCPv4 Filter Commands	369
42.1 ip dhcp filter	369
42.2 ip dhcp filter (interface)	369
42.3 ip dhcp filter mac-verify	370
42.4 ip dhcp filter limit rate	371
42.5 ip dhcp filter decline rate	372
42.6 ip dhcp filter server permit-entry	372
42.7 show ip dhcp filter	373
42.8 show ip dhcp filter interface	374
42.9 show ip dhcp filter server permit-entry	374
Chapter 43 DHCPv6 Filter Commands	376
43.1 ipv6 dhcp filter	376
43.2 ipv6 dhcp filter (interface)	376