Netgear XSM4324FS CLI Manual Software Version 12.x - Page 967

M4300 Intelligent Edge Series Fully Managed Stackable Switches Parameter Description {deny | permit} Specifies whether the IP ACL rule permits or denies an action. Note: For 5630x and 5650x-based systems, assign-queue, redirect, and mirror attributes are configurable for a deny rule, but they have no operational effect. every Match every packet. {eigrp | gre | icmp | igmp | ip | Specifies the protocol to filter for an extended IP ACL rule. ipinip | ospf | pim | tcp | udp | 0-255} srcip srcmask | any | host scrip Specifies a source IP address and source netmask for match condition of the IP ACL rule. Specifying any specifies srcip as 0.0.0.0 and srcmask as 255.255.255.255. Specifying host A.B.C.D specifies srcip as A.B.C.D and srcmask as 0.0.0.0. [{range {portkey | startport} {portkey | endport} | {eq | neq | lt | gt} {portkey | 0-65535}] Note: This option is available only if the protocol is TCP or UDP. Specifies the source layer 4 port match condition for the IP ACL rule. You can use the port number, which ranges from 0-65535, or you specify the portkey, which can be one of the following keywords: • For TCP: bgp, domain, echo, ftp, ftp-data, http, smtp, telnet, www, pop2, or pop3. • For UDP: domain, echo, ntp, rip, snmp, tftp, time, or who. For both TCP and UDP, each of these keywords translates into its equivalent port number, which is used as both the start and end of a port range. If range is specified, the IP ACL rule matches only if the layer 4 port number falls within the specified portrange. The startport and endport parameters identify the first and last ports that are part of the port range. They have values from 0 to 65535. The ending port must have a value equal or greater than the starting port. The starting port, ending port, and all ports in between will be part of the layer 4 port range. When eq is specified, the IP ACL rule matches only if the layer 4 port number is equal to the specified port number or portkey. When lt is specified, IP ACL rule matches if the layer 4 port number is less than the specified port number or portkey. It is equivalent to specifying the range as 0 to . When gt is specified, the IP ACL rule matches if the layer 4 port number is greater than the specified port number or portkey. It is equivalent to specifying the range as to 65535. When neq is specified, IP ACL rule matches only if the layer 4 port number is not equal to the specified port number or portkey. Two rules are added in the hardware one with range equal to 0 to and one with range equal to . Note: Port number matches only apply to unfragmented or first fragments. Quality of Service Commands 967 CLI Command Reference Manual