Home » Netgear Manuals » Hubs & Switches » Netgear M5300-28G3 » Manual Viewer

Netgear M5300-28G3 Command Line Interface (CLI) User Manual - Page 499

ip access-group, name of the Access Control List.

Add to My Manuals
Save this manual to your list of manuals

Page 499 highlights

ProSafe Managed Switch command parameters are all optional, but the most frequently used parameters appear in the same relative order as shown in the command format. The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule. The allowed value is 0-(n-1), where n is the number of user configurable queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule. The time-range parameter allows imposing time limitation on the IP ACL rule as defined by the parameter . If a time range with the specified name does not exist and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied immediately. If a time range with specified name exists and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied when the time-range with specified name becomes active. The ACL rule is removed when the time-range with specified name becomes inactive. The user can specify a simple rate limiter for packets matching an ACL "permit" rule. The user needs to specify the burst size in kbytes and allowed rate of traffic in kbps. The conforming traffic is allowed to transmit, and non-conforming traffic is dropped. This action is ignored for any "deny" rule, since by definition matching packets are dropped. Format Mode {deny | permit} {every | {{icmp | igmp | ip | tcp | udp | } [{eq { | } [{eq {| }] [precedence | tos | dscp ] [log] [rate-limit ] [timerange ] [assign-queue ] [{mirror | redirect} [lag |]] Ipv4-Access-List Config ip access-group This command either attaches a specific IP ACL identified by to an interface or associates with a VLAN ID in a given direction. The parameter is the name of the Access Control List. An optional sequence number may be specified to indicate the order of this IP access list relative to other IP access lists already assigned to this interface and direction. A lower number indicates higher precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached IP access list using that sequence number. If the sequence number is not specified for this command, a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used. Note: The option might not be available, depending on the platform. Quality of Service (QoS) Commands 499

Section	Page
ProSafe Managed Switch	1
Contents	3
1. Using the Command-Line Interface	8
Licensing and Command Support	8
Command Syntax	10
Command Conventions	11
Common Parameter Values	11
Unit/Slot/Port Naming Convention	12
Using a Command’s “No” Form	13
Managed Switch Modules	13
Command Modes	14
Command Completion and Abbreviation	17
CLI Error Messages	18
CLI Line-Editing Conventions	18
Using CLI Help	19
Accessing the CLI	20
2. Stacking Commands	21
Dedicated Port Stacking	21
Stacking Commands	29
Non-Stop Forwarding Commands	31
Stack Firmware Synchronization Commands	35
3. Switching Commands	38
Port Configuration Commands	39
Loopback Interface Commands	45
Spanning Tree Protocol (STP) Commands	47
VLAN Commands	64
Double VLAN Commands	77
Voice VLAN Commands	80
Provisioning (IEEE 802.1p) Commands	82
Protected Ports Commands	82
Private Group Commands	85
Private VLAN	86
GARP Commands	90
GVRP Commands	92
GMRP Commands	94
Port-Based Network Access Control Commands	96
802.1X Supplicant Commands	109
Storm-Control Commands	112
Flow Control Commands	122
Port-Channel/LAG (802.3ad) Commands	123
Port Mirroring	139
Static MAC Filtering	141
DHCP L2 Relay Agent Commands	145
DHCP Client Commands	149
DHCP Snooping Configuration Commands	150
Dynamic ARP Inspection Commands	159
IGMP Snooping Configuration Commands	166
IGMP Snooping Querier Commands	177
MLD Snooping Commands	180
MLD Snooping Querier Commands	187
set mld querier	187
set mld querier query_interval	188
set mld querier timer expiry	188
set mld querier election participate	189
show mldsnooping querier	189
Port Security Commands	190
LLDP (802.1AB) Commands	194
LLDP-MED Commands	203
Denial of Service Commands	212
MAC Database Commands	222
ISDP Commands	224
Priority-Based Flow Control Commands	229
4. Multicast VLAN Registration (MVR)	232
About MVR	232
MVR Commands	232
5. Routing Commands	240
Address Resolution Protocol (ARP) Commands	240
IP Routing Commands	246
Router Discovery Protocol Commands	263
Virtual LAN Routing Commands	266
Virtual Router Redundancy Protocol Commands	267
DHCP and BOOTP Relay Commands	276
IP Helper Commands	278
Open Shortest Path First (OSPF) Commands	282
OSPF Graceful Restart Commands	322
nsf	323
nsf restart-interval	323
nsf helper	324
nsf helper disable	325
nsf [ietf] helper strict-lsa-checking	325
OSPF Interface Flap Dampening Commands	327
Routing Information Protocol (RIP) Commands	329
ICMP Throttling Commands	336
6. IP Multicast Commands	339
Multicast Commands	339
DVMRP Commands	344
PIM Commands	349
Internet Group Message Protocol (IGMP) Commands	360
IGMP Proxy Commands	367
7. IPv6 Commands	373
Tunnel Interface Commands	373
IPv6 Routing Commands	375
OSPFv3 Commands	398
OSPFv3 Graceful Restart Commands	429
DHCPv6 Commands	431
8. IPv6 Multicast Commands	439
IPv6 Multicast Forwarder Commands	439
IPv6 PIM Commands	442
IPv6 MLD Commands	449
IPv6 MLD-Proxy Commands	455
9. Quality of Service (QoS) Commands	461
Class of Service (CoS) Commands	461
Differentiated Services (DiffServ) Commands	469
DiffServ Class Commands	470
DiffServ Policy Commands	479
DiffServ Service Commands	484
DiffServ Show Commands	485
MAC Access Control List (ACL) Commands	491
IP Access Control List (ACL) Commands	495
IPv6 Access Control List (ACL) Commands	502
Time Range Commands for Time-Based ACLs	506
AutoVOIP	508
iSCSI Commands	512
10. Power over Ethernet (PoE) Commands	518
About PoE	518
PoE Commands	519
11. Utility Commands	529
Auto Install Commands	530
Dual Image Commands	532
System Information and Statistics Commands	534
Logging Commands	550
Email Alerting and Mail Server Commands	556
System Utility and Clear Commands	562
Simple Network Time Protocol (SNTP) Commands	572
DHCP Server Commands	579
DNS Client Commands	591
Packet Capture Commands	595
Serviceability Packet Tracing Commands	598
Cable Test Command	617
sFlow Commands	617
Software License Commands	622
IP Address Conflict Commands	623
Link Local Protocol Filtering Commands	624
RMON Stats and History Commands	625
UDLD Commands	631
12. Management Commands	635
Configuring the Switch Management CPU	636
Network Interface Commands	638
Console Port Access Commands	641
Telnet Commands	643
Secure Shell (SSH) Commands	648
Management Security Commands	651
Hypertext Transfer Protocol (HTTP) Commands	652
Access Commands	659
User Account Commands	659
SNMP Commands	683
RADIUS Commands	694
TACACS+ Commands	706
Configuration Scripting Commands	711
Pre-Login Banner and System Prompt Commands	713
Switch Database Management (SDM) Templates	714
IPv6 Management Commands	716
13. Log Messages	721
Core	722
Utilities	724
Management	726
Switching	730
QoS	736
Routing/IPv6 Routing	737
Multicast	740
Stacking	742
Technologies	743
O/S Support	745
14. Captive Portal Commands	747
Captive Portal Global Commands	747
Captive Portal Configuration Commands	751
Captive Portal Status Commands	757
Captive Portal Client Connection Commands	761
Captive Portal Interface Commands	765
Captive Portal Local User Commands	766
Captive Portal User Group Commands	772

Match case Limit results 1 per page

Quality of Service (QoS) Commands

499

ProSafe Managed Switch

command parameters are all optional, but the most frequently used parameters appear in the

same relative order as shown in the command format.

The assign-queue parameter allows specification of a particular hardware queue for handling

traffic that matches this rule. The allowed

<queue-id>

value is 0-(n-1), where n is the

number of user configurable queues available for the hardware platform. The

assign-queue

parameter is valid only for a

permit

rule.

The time-range parameter allows imposing time limitation on the IP ACL rule as defined by

the parameter <time-range-name>. If a time range with the specified name does not exist

and the IP ACL containing this ACL rule is applied to an interface or bound to a VLAN, then

the ACL rule is applied immediately. If a time range with specified name exists and the IP

ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule

is applied when the time-range with specified name becomes active. The ACL rule is

removed when the time-range with specified name becomes inactive.

The user can specify a simple rate limiter for packets matching an ACL “permit” rule. The

user needs to specify the burst size in kbytes and allowed rate of traffic in kbps. The

conforming traffic is allowed to transmit, and non-conforming traffic is dropped. This action is

ignored for any “deny” rule, since by definition matching packets are dropped.

Format

{deny | permit} {every | {{icmp | igmp | ip | tcp | udp | <number>}

<srcip> <srcmask>[{eq {<portkey> | <0-65535>} <dstip> <dstmask> [{eq

{<portkey>| <0-65535>}] [precedence <precedence> | tos <tos>

<tosmask> | dscp <dscp>] [log] [rate-limit <1-4294967295> <1-128>]

[timerange <time-range-name>] [assign-queue <queue-id>] [{mirror |

redirect}

[lag <lag number> |<unit/slot/port>]]

Mode

ip access-group

This command either attaches a specific IP ACL identified by

to an

interface or associates with a VLAN ID in a given direction. The parameter

<name>

is the

name of the Access Control List.

An optional sequence number may be specified to indicate the order of this IP access list

relative to other IP access lists already assigned to this interface and direction. A lower

number indicates higher precedence order. If a sequence number is already in use for this

interface and direction, the specified access list replaces the currently attached IP access list

using that sequence number. If the sequence number is not specified for this command, a

sequence number that is one greater than the highest sequence number currently in use for

this interface and direction is used.

Note:

The <

out

> option might not be available, depending on the platform.

Ipv4-Access-List Config