TP-Link T2600G-18TSTL-SG3216 T2600G-18TSUN V1 Configuration Guide - Page 731

Configuring ACL ACL Configuration IPv6 access list 3600 rule 1 deny sip cdcd:910a:2222:5498:8475:1111:3900:2020 sip-mask ffff:ff ff:ffff:ffff Switch(config)#end Switch#copy running-config startup-config  Packet Content ACL Note: Only T2600G-28TS supports Packet Content ACL. Step 1 Step 2 Step 3 Step 4 configure Enter global configuration mode access-list create access-list-num Create a Packet Content ACL. access-list-num: Enter an ACL ID. The ID ranges from 4500 to 4999. access-list packet-content profile chunk-offset0 offset0 chunk-offset1 offset1 chunk-offset2 offset2 chunk-offset3 offset3 Specify the offset of each chunk, all the 4 chunks must be set at the same time. offset0 -offset3: Specify the offset of each chunk, the value ranges from 0 to 31. When the offset is set as 31, it matches the first 1, 2,127,128 bytes of the packet; when the offset is set as 0, it matches the 3, 4, 5, 6 bytes, and so on, for the rest of the offset value. access-list packet-content config acl-id rule rule-id {deny | permit} [chunk0 value mask0 mask] [chunk1 value mask1 mask] [chunk2 value mask2 mask] [chunk3 value mask3 mask] [tseg tseg-name] Add rules to the ACL. acl-id: The ID number of the ACL you have created. rule-id: Assign an ID to the rule. It should not be the same as any existing Packet Content Rule IDs. permit | deny: Specify the action to be taken with the packets that match the rule. Deny means to discard; permit means to forward. By default, it is set to permit. value: Enter the 4-byte value in hexadecimal for the desired chunk, like '0000ffff'. The Packet Content ACL will check this chunk of packets to examine if the packets match the rule or not. mask: Enter the 4-byte mask in hexadecimal for the desired chunk. The mask must be written completely in 4-byte hex mode, like '0000ffff'. The mask specifies which bits to match the rule. time-segment-name: The name of the time-range. The default is No Limit. Configuration Guide 701