TP-Link T1600G-28PS T1600G-28PSUN V3 CLI Reference Guide Guide - Page 370

destination-ip-mask -- Enter the destination IP address mask. This is required if a destination IP address is entered. dscp-value -- Specify the DSCP value between 0 and 63. tos-value --Specify an IP ToS value to be matched between 0 and 15. pre-value --Specify an IP Precedence value to be matched between 0 and 7. protocol -- Specify a protocol type. s-port-number -- Specify the source port number. s-port-mask -- Specify the source port mask with 4 hexadecimal numbers. d-port-number -- Specify the destination port number. d-port-mask -- Specify the destination port mask with 4 hexadecimal numbers. tcpflag -- For TCP protocol, specify the flag value using either binary numbers or * (for example, 01*010*). The default is *, which indicates that the flag will not be matched. The flags are URG (Urgent flag), ACK (acknowledge flag), PSH(push flag), RST(reset flag),SYN(synchronize flag), and FIN(finish flag). time-range-name -- The name of the time-range. The default is No Limit. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create Combined ACL 1100 and configure Rule 1 to deny packets with source IP address 192.168.3.100 in VLAN 2: T1600G-28TS(config)# access-list create 1100 T1600G-28TS(config)# access-list combined 1100 logging disable rule 1 permit vid 2 sip 192.168.3.100 sip-mask 255.255.255.255 40.6 access-list ipv6 Description The access-list ipv6 command is used to add IPv6 ACL rule. To delete the corresponding rule, please use no access-list ipv6 command. IPv6 ACLs 349