TP-Link 10GE T1700G-28TQUN V1 CLI Reference Guide - Page 203

Standard-IP ACLs analyze and process data packets based on a series of match conditions, which can be the source IP addresses and destination IP addresses carried in the packets. Syntax access-list standard acl-id rule rule-id { deny | permit } [[ sip source-ip ] smask source-ip-mask] [[ dip destination-ip ] dmask destination-ip-mask ] no access-list standard acl-id rule rule-id Parameter acl-id -- The desired Standard-IP ACL for configuration. rule-id -- The rule ID. deny -- The operation to discard packets. permit --The operation to forward packets. It is the default value. source-ip -- The source IP address contained in the rule. source-ip-mask -- The source IP address mask. It is required if you typed the source IP address. destination-ip -- The destination IP address contained in the rule. destination-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a Standard-IP ACL whose ID is 520, and add Rule 10 for it. In the rule, the source IP address is 192.168.0.100, the source IP address mask is 255.255.255.0, and the packets match this rule will be forwarded by the switch: T1700G-28TQ(config)# access-list create 520 T1700G-28TQ(config)# access-list standard 520 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 187