Home » TP-Link Manuals » Hubs & Switches » TP-Link T2600G-28SQ » Manual Viewer

TP-Link T2600G-28SQ T2600G Series Switches CLI Reference Guide Guide - Page 432

access-list combined

View all TP-Link T2600G-28SQ manuals

Add to My Manuals
Save this manual to your list of manuals

Page 432 highlights

d-port-mask -- Specify the destination port mask with 4 hexadecimal numbers. tcpflag -- For TCP protocol, specify the flag value using either binary numbers or * (for example, 01*010*). The default is *, which indicates that the flag will not be matched. The flags are URG (Urgent flag), ACK (acknowledge flag), PSH(push flag), RST(reset flag),SYN(synchronize flag), and FIN(finish flag). time-range-name -- The name of the time-range. The default is No Limit. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create IP ACL 600, and configure Rule 1 to permit packets with source IP address 192.168.1.100: T2600G-28TS (config)#access-list create 600 T2600G-28TS (config)#access-list ip 600 rule 1 permit logging disable sip 192.168.1.100 sip-mask 255.255.255.255 47.6 access-list combined Description The access-list combined command is used to add Combined ACL rule. To delete the corresponding rule, please use no access-list extended command. Syntax access-list combined acl-id-or-name rule {auto | rule-id } {deny | permit} logging {enable | disable} [smac source-mac-address smask source-mac-mask] [dmac dest-mac-address dmask dest-mac-mask] [vid vlan-id] [type ether-type] [pri priority] [sip source-ip-address sip-mask source-ip-mask]] [dip destination-ip-address dip-mask destination-ip-mask] [dscp dscp-value] [tos tos-value] [pre pre-value] [protocol protocol [s-port s-port-number s-port-mask s-port-mask] [d-port d-port-number d-port-mask d-port-mask] [tcpflag tcpflag]] [tseg time-range-name] no access-list combined acl-id-or-name rule rule-id 409

Section	Page
Preface	24
Charpter 1. Using the CLI	29
1.1 Accessing the CLI	29
1.1.1 Logon by a console port	29
1.1.2 Logon by Telnet	31
1.1.3 Logon by SSH	33
1.2 CLI Command Modes	38
1.3 Privilege Restrictions	41
1.4 Conventions	41
1.4.1 Format Conventions	41
1.4.2 Special Characters	42
1.4.3 Parameter Format	42
Charpter 2. Line Commands	43
2.1 line	43
2.2 media-type rj45	44
Charpter 3. User Interface	45
3.1 enable	45
3.2 service password-encryption	45
3.3 enable password	46
3.4 enable secret	47
3.5 configure	48
3.6 exit	49
3.7 end	49
3.8 clipaging	50
3.9 history	50
3.10 history clear	51
Charpter 4. User Management Commands	52
4.1 user name (password)	52
4.2 user name (secret)	53
4.3 service password-recovery	54
4.4 show user account-list	55
4.5 show user configuration	56
Charpter 5. System Configuration Commands	57
5.1 system-time manual	57
5.2 system-time ntp	57
5.3 system-time dst predefined	59
5.4 system-time dst date	60
5.5 system-time dst recurring	61
5.6 hostname	62
5.7 location	63
5.8 contact-info	63
5.9 ip address	64
5.10 ip address-alloc	65
5.11 reset	66
5.12 service reset-disable	66
5.13 reboot	67
5.14 reboot-schedule	67
5.15 copy running-config startup-config	68
5.16 copy startup-config tftp	69
5.17 copy tftp startup-config	69
5.18 copy backup-config tftp	70
5.19 copy backup-config startup-config	71
5.20 copy running-config backup-config	71
5.21 copy tftp backup-config	72
5.22 boot application	72
5.23 boot config	73
5.24 remove backup-image	74
5.25 firmware upgrade	74
5.26 boot autoinstall start	75
5.27 boot autoinstall persistent-mode	76
5.28 boot autoinstall auto-save	76
5.29 boot autoinstall auto-reboot	77
5.30 boot autoinstall retry-count	77
5.31 show boot autoinstall	78
5.32 show boot autoinstall downloaded-config	78
5.33 ping	79
5.34 tracert	80
5.35 show system-info	81
5.36 show image-info	81
5.37 show boot	82
5.38 show running-config	82
5.39 show startup-config	83
5.40 show system-time	83
5.41 show system-time dst	84
5.42 show system-time ntp	84
5.43 show cable-diagnostics interface	85
5.44 show cpu-utilization	85
5.45 show memory-utilization	86
5.46 show temperature	86
5.47 show voltage	87
Charpter 6. EEE Configuration Commands	88
6.1 eee	88
6.2 show interface eee	88
Charpter 7. SDM Template Commands	90
7.1 sdm prefer	90
7.2 show sdm prefer	91
Charpter 8. Time Range Commands	92
8.1 time-range	92
8.2 absolute	92
8.3 periodic	93
8.4 holiday (time-range mode)	94
8.5 holiday	95
8.6 show holiday	95
8.7 show time-range	96
Charpter 9. Port Configuration Commands	97
9.1 interface gigabitEthernet	97
9.2 interface range gigabitEthernet	97
9.3 Description	99
9.4 shutdown	99
9.5 flow-control	100
9.6 duplex	101
9.7 jumbo-size	101
9.8 speed	102
9.9 serdes-mode (Only for Certain Devices)	102
9.10 clear counters	103
9.11 show fiber-ports	104
9.12 show interface status	104
9.13 show interface counters	105
9.14 show interface configuration	106
Charpter 10. Port Isolation Commands	107
10.1 port isolation	107
10.2 show port isolation interface	108
Charpter 11. Loopback Detection Commands	109
11.1 loopback-detection (global)	109
11.2 loopback-detection interval	109
11.3 loopback-detection recovery-time	110
11.4 loopback-detection (interface)	111
11.5 loopback-detection config process-mode	111
11.6 loopback-detection recover	112
11.7 show loopback-detection global	113
11.8 show loopback-detection interface	113
Charpter 12. DDM Commands (Only for Certain Devices)	115
12.1 ddm state enable	115
12.2 ddm shutdown	116
12.3 ddm temperature_threshold	116
12.4 ddm voltage_threshold	117
12.5 ddm bias_current_threshold	118
12.6 ddm tx_power_threshold	119
12.7 ddm rx_power_threshold	120
12.8 show ddm configuration	121
12.9 show ddm status	122
Charpter 13. Etherchannel Commands	123
13.1 channel-group	123
13.2 port-channel load-balance	124
13.3 lacp system-priority	125
13.4 lacp port-priority	126
13.5 show etherchannel	126
13.6 show etherchannel load-balance	127
13.7 show lacp	128
13.8 show lacp sys-id	128
Charpter 14. MAC Address Commands	130
14.1 mac address-table static	130
14.2 no mac address-table dynamic	131
14.3 mac address-table aging-time	131
14.4 mac address-table filtering	132
14.5 mac address-table notification	133
14.6 mac address-table max-mac-count	133
14.7 mac address-table notification (interface)	135
14.8 mac address-table security (For T2600G-28TS/T2600G-28MPS/T2600G-28SQ/T2600G-52TS)	136
14.9 mac address-table vlan-security (For T2600G-18TS)	137
14.10 show mac address-table	138
14.11 clear mac address-table	138
14.12 show mac address-table aging-time	139
14.13 show mac address-table max-mac-count	139
14.14 show mac address-table interface	140
14.15 show mac address-table count	141
14.16 show mac address-table address	141
14.17 show mac address-table vlan	142
14.18 show mac address-table notification	142
14.19 show mac address-table security	143
Charpter 15. IEEE 802.1Q VLAN Commands	144
15.1 vlan	144
15.2 name	145
15.3 vlan_trunk (globally)	145
15.4 vlan_trunk (interface)	146
15.5 switchport general allowed vlan	146
15.6 switchport pvid	147
15.7 switchport check ingress	148
15.8 switchport acceptable frame	149
15.9 show vlan summary	149
15.10 show vlan brief	150
15.11 show vlan	150
15.12 show interface switchport	151
Charpter 16. MAC-based VLAN Commands	152
16.1 mac-vlan mac-address	152
16.2 mac-vlan	153
16.3 show mac-vlan	153
16.4 show mac-vlan interface	154
Charpter 17. Protocol-based VLAN Commands	155
17.1 protocol-vlan template	155
17.2 protocol-vlan vlan	156
17.3 protocol-vlan group	157
17.4 show protocol-vlan template	157
17.5 show protocol-vlan vlan	158
Charpter 18. Private VLAN Commands	159
18.1 private-vlan primary	159
18.2 private-vlan community	159
18.3 private-vlan isolated	160
18.4 private-vlan association	161
18.5 switchport private-vlan	161
18.6 switchport private-vlan host-association	162
18.7 switchport private-vlan mapping	163
18.8 show vlan private-vlan	164
18.9 show vlan private-vlan interface	164
Charpter 19. VLAN-VPN Commands	166
19.1 dot1q-tunnel	166
19.2 switchport dot1q-tunnel tpid	166
19.3 dot1q-tunnel mapping	167
19.4 switchport dot1q-tunnel mode	168
19.5 switchport dot1q-tunnel missdrop	169
19.6 switchport dot1q-tunnel use_inner_priority	169
19.7 switchport dot1q-tunnel mapping	170
19.8 switchport dot1q-tunnel replace	171
19.9 show dot1q-tunnel	172
19.10 show dot1q-tunnel mapping	173
19.11 show dot1q-tunnel interface	173
Charpter 20. GVRP Commands	174
20.1 gvrp	174
20.2 gvrp (interface)	174
20.3 gvrp registration	175
20.4 gvrp timer	176
20.5 show gvrp interface	177
20.6 show gvrp global	178
Charpter 21. IGMP Snooping Commands	179
21.1 ip igmp snooping (global)	179
21.2 ip igmp snooping version	179
21.3 ip igmp snooping drop-unknown	180
21.4 ip igmp snooping header-validation	181
21.5 ip igmp snooping vlan-config	181
21.6 ip igmp snooping vlan-config (immediate-leave)	183
21.7 ip igmp snooping vlan-config (report-suppression)	183
21.8 ip igmp snooping vlan-config (router-ports-forbidden)	184
21.9 ip igmp snooping vlan-config (rport interface)	185
21.10 ip igmp snooping vlan-config (static)	186
21.11 ip igmp snooping vlan-config (querier)	187
21.12 ip igmp snooping (interface)	188
21.13 ip igmp snooping max-groups	189
21.14 ip igmp snooping immediate-leave	190
21.15 ip igmp snooping authentication	190
21.16 ip igmp snooping accounting	191
21.17 ip igmp profile	192
21.18 deny	192
21.19 permit	193
21.20 range	193
21.21 ip igmp filter	194
21.22 clear ip igmp snooping statistics	195
21.23 show ip igmp snooping	195
21.24 show ip igmp snooping interface	196
21.25 show ip igmp snooping vlan	197
21.26 show ip igmp snooping groups	197
21.27 show ip igmp profile	198
Charpter 22. MLD Snooping Commands	200
22.1 ipv6 mld snooping (global)	200
22.2 ipv6 mld snooping drop-unknown	200
22.3 ipv6 mld snooping vlan-config	201
22.4 ipv6 mld snooping vlan-config (immediate-leave)	202
22.5 ipv6 mld snooping vlan-config (report-suppression)	203
22.6 ipv6 mld snooping vlan-config (router-ports-forbidden)	204
22.7 ipv6 mld snooping vlan-config (rport interface)	205
22.8 ipv6 mld snooping vlan-config (static)	205
22.9 ipv6 mld snooping vlan-config (querier)	206
22.10 ipv6 mld snooping (interface)	208
22.11 ipv6 mld snooping max-groups	208
22.12 ipv6 mld snooping immediate-leave	209
22.13 ipv6 mld profile	210
22.14 deny	211
22.15 permit	211
22.16 range	212
22.17 ipv6 mld filter	212
22.18 clear ipv6 mld snooping statistics	213
22.19 show ipv6 mld snooping	213
22.20 show ipv6 mld snooping interface	214
22.21 show ipv6 mld snooping vlan	215
22.22 show ipv6 mld snooping groups	215
22.23 show ipv6 mld profile	216
Charpter 23. MVR Commands	217
23.1 mvr (global)	217
23.2 mvr group	217
23.3 mvr mode	218
23.4 mvr querytime	219
23.5 mvr vlan	220
23.6 mvr (interface)	220
23.7 mvr type	221
23.8 mvr immediate	222
23.9 mvr vlan (group)	222
23.10 show mvr	223
23.11 show mvr interface	224
23.12 show mvr members	224
Charpter 24. MSTP Commands	226
24.1 debug spanning-tree	226
24.2 spanning-tree (global)	227
24.3 spanning-tree (interface)	227
24.4 spanning-tree common-config	228
24.5 spanning-tree mode	229
24.6 spanning-tree mst configuration	230
24.7 instance	230
24.8 name	231
24.9 revision	232
24.10 spanning-tree mst instance	233
24.11 spanning-tree mst	233
24.12 spanning-tree priority	234
24.13 spanning-tree timer	235
24.14 spanning-tree hold-count	236
24.15 spanning-tree max-hops	236
24.16 spanning-tree bpdufilter	237
24.17 spanning-tree bpduflood	238
24.18 spanning-tree bpduguard	238
24.19 spanning-tree guard loop	239
24.20 spanning-tree guard root	240
24.21 spanning-tree guard tc	240
24.22 spanning-tree mcheck	241
24.23 show spanning-tree active	241
24.24 show spanning-tree bridge	242
24.25 show spanning-tree interface	242
24.26 show spanning-tree interface-security	243
24.27 show spanning-tree mst	244
Charpter 25. LLDP Commands	246
25.1 lldp	246
25.2 lldp forward_message	246
25.3 lldp hold-multiplier	247
25.4 lldp timer	248
25.5 lldp receive	249
25.6 lldp transmit	249
25.7 lldp snmp-trap	250
25.8 lldp tlv-select	251
25.9 lldp management-address	251
25.10 lldp med-fast-count	252
25.11 lldp med-status	253
25.12 lldp med-tlv-select	253
25.13 lldp med-location	254
25.14 show lldp	255
25.15 show lldp interface	255
25.16 show lldp local-information interface	256
25.17 show lldp neighbor-information interface	257
25.18 show lldp traffic interface	257
Charpter 26. L2PT Commands	259
26.1 l2protocol-tunnel	259
26.2 l2protocol-tunnel type	259
26.3 show l2protocol-tunnel global	261
26.4 show l2protocol-tunnel interface	261
Charpter 27. PPPoE ID-Insertion Commands	263
27.1 pppoe id-insertion (global)	263
27.2 pppoe circuit-id (interface)	264
27.3 pppoe circuit-id type	264
27.4 pppoe remote-id	265
27.5 show pppoe id-insertion global	266
27.6 show pppoe id-insertion interface	266
Charpter 28. Static Routes Commands	268
28.1 ip routing	268
28.2 interface vlan	268
28.3 interface loopback	269
28.4 switchport	269
28.5 interface range port-channel	270
28.6 Description	271
28.7 shutdown	271
28.8 interface port-channel	272
28.9 ip route	273
28.10 ipv6 routing	273
28.11 ipv6 route	274
28.12 show interface vlan	275
28.13 show ip interface	275
28.14 show ip interface brief	276
28.15 show ip route	276
28.16 show ip route specify	277
28.17 show ip route summary	278
28.18 show ipv6 interface	278
28.19 show ipv6 route	279
28.20 show ipv6 route summary	279
Charpter 29. IPv6 Address Configuration Commands	281
29.1 ipv6 enable	281
29.2 ipv6 address autoconfig	282
29.3 ipv6 address link-local	282
29.4 ipv6 address dhcp	283
29.5 ipv6 address ra	284
29.6 ipv6 address eui-64	284
29.7 ipv6 address	285
29.8 show ipv6 interface	286
Charpter 30. ARP Commands	287
30.1 arp	287
30.2 clear arp-cache	288
30.3 arp dynamicrenew	288
30.4 arp timeout	289
30.5 gratuitous-arp intf-status-up enable	289
30.6 gratuitous-arp dup-ip-detected enable	290
30.7 gratuitous-arp learning enable	290
30.8 gratuitous-arp send-interval	291
30.9 ip proxy-arp	292
30.10 ip local-proxy-arp	292
30.11 show arp	293
30.12 show ip arp (interface)	294
30.13 show ip arp summary	294
30.14 show gratuitous-arp	295
30.15 show ip proxy-arp	295
Charpter 31. DHCP Server Commands	297
31.1 service dhcp server	297
31.2 ip dhcp server extend-option capwap-ac-ip	297
31.3 ip dhcp server extend-option vendor-class-id	298
31.4 ip dhcp server exclude-address	299
31.5 ip dhcp server pool	300
31.6 ip dhcp server ping timeout	300
31.7 ip dhcp server ping packets	301
31.8 network	302
31.9 lease	302
31.10 address hardware-address	303
31.11 address client-identifier	304
31.12 default-gateway	304
31.13 dns-server	305
31.14 netbios-name-server	306
31.15 netbios-node-type	306
31.16 next-server	307
31.17 domain-name	308
31.18 bootfile	308
31.19 show ip dhcp server status	309
31.20 show ip dhcp server statistics	309
31.21 show ip dhcp server extend-option	310
31.22 show ip dhcp server pool	310
31.23 show ip dhcp server excluded-address	311
31.24 show ip dhcp server manual-binding	311
31.25 show ip dhcp server binding	312
31.26 clear ip dhcp server statistics	312
31.27 clear ip dhcp server binding	313
Charpter 32. DHCP Relay Commands	314
32.1 service dhcp relay	314
32.2 ip dhcp relay hops	314
32.3 ip dhcp relay time	315
32.4 ip helper-address	316
32.5 ip dhcp relay information	316
32.6 ip dhcp relay information strategy	317
32.7 ip dhcp relay information format	318
32.8 ip dhcp relay information circuit-id	319
32.9 ip dhcp relay information remote-id	319
32.10 ip dhcp relay default-interface	320
32.11 ip dhcp relay vlan	321
32.12 show ip dhcp relay	321
Charpter 33. DHCP L2 Relay Commands	323
33.1 ip dhcp l2relay	323
33.2 ip dhcp l2relay vlan	323
33.3 ip dhcp l2relay information	324
33.4 ip dhcp l2relay information strategy	324
33.5 ip dhcp l2relay information format	325
33.6 ip dhcp l2relay information circuit-id	326
33.7 ip dhcp l2relay information remote-id	327
33.8 show ip dhcp l2relay	327
33.9 show ip dhcp l2relay interface	328
Charpter 34. QoS Commands	329
34.1 qos trust mode	329
34.2 qos port-priority	330
34.3 qos cos-map	330
34.4 qos dot1p-remap	331
34.5 qos dscp-map	332
34.6 qos dscp-remap	333
34.7 qos queue bandwidth (For T2600G-28TS/T2600G-28MPS/T2600G-28SQ/T2600G-52TS)	334
34.8 qos queue mode	335
34.9 show qos cos-map	336
34.10 show qos dot1p-remap interface (For T2600G-28TS/T2600G-28MPS/T2600G-28SQ/T2600G-52TS)	336
34.11 show qos dot1p-remap (For T2600G-18TS)	337
34.12 show qos dscp-map interface (For T2600G-28TS/T2600G-28MPS/T2600G-28SQ/T2600G-52TS)	337
34.13 show qos dscp-map (For T2600G-18TS)	338
34.14 show qos dscp-remap interface (For T2600G-28TS/T2600G-28MPS/T2600G-28SQ/T2600G-52TS)	338
34.15 show qos dscp-remap (For T2600G-18TS)	339
34.16 show qos port-priority interface	339
34.17 show qos trust interface	340
34.18 show qos queue interface	340
Charpter 35. Bandwidth Control Commands	342
35.1 storm-control rate-mode	342
35.2 storm-control	343
35.3 storm-control exceed	344
35.4 storm-control recover	345
35.5 bandwidth	345
35.6 show storm-control	346
35.7 show bandwidth	347
Charpter 36. Voice VLAN Commands	348
36.1 voice vlan	348
36.2 voice vlan (interface)	348
36.3 voice vlan priority	349
36.4 voice vlan oui	350
36.5 show voice vlan	350
36.6 show voice vlan oui-table	351
36.7 show voice vlan interface	351
Charpter 37. Auto VoIP Commands	353
37.1 auto-voip	353
37.2 auto-voip (interface)	353
37.3 auto-voip dot1p	354
37.4 auto-voip untagged	355
37.5 auto-voip none	355
37.6 no auto-voip (interface)	356
37.7 auto-voip dscp	356
37.8 auto-voip data priority	357
37.9 show auto-voip	357
Charpter 38. Access Control Commands	359
38.1 user access-control ip-based enable	359
38.2 user access-control ip-based	359
38.3 user access-control mac-based enable	360
38.4 user access-control mac-based	361
38.5 user access-control port-based enable	362
38.6 user access-control port-based	362
Charpter 39. HTTP and HTTPS Commands	364
39.1 ip http server	364
39.2 ip http port	365
39.3 ip http max-users	365
39.4 ip http session timeout	366
39.5 ip http secure-server	367
39.6 ip http secure-port	367
39.7 ip http secure-protocol	368
39.8 ip http secure-ciphersuite	369
39.9 ip http secure-max-users	370
39.10 ip http secure-session timeout	371
39.11 ip http secure-server download certificate	371
39.12 ip http secure-server download key	372
39.13 show ip http configuration	373

Match case Limit results 1 per page

409

d-port-mask

——

Specify the destination port mask with 4 hexadecimal

numbers.

tcpflag

——

For TCP protocol, specify the flag value using either binary

numbers or * (for example, 01*010*). The default is *, which indicates that the

flag will not be matched. The flags are URG (Urgent flag), ACK (acknowledge

flag), PSH(push flag), RST(reset flag),SYN(synchronize flag), and FIN(finish

flag).

time-range-name

—— The name of the time-range. The default is No Limit.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Example

Create IP ACL 600, and configure Rule 1 to permit packets with source IP

address 192.168.1.100:

T2600G-28TS (config)#access-list create

600

T2600G-28TS (config)#access-list ip

600

rule

permit

logging

disable

sip

192.168.1.100

sip-mask

255.255.255.255

47.6

access-list combined

Description

The

access-list combined

command is used to add Combined ACL rule. To

delete

the

corresponding

rule,

please

use

access-list

extended

command.

Syntax

access-list combined

acl-id-or-name

rule

{auto |

rule-id

} {deny | permit}

logging

{enable | disable} [

smac

source-mac-address

smask

source-mac-mask

] [

dmac

dest-mac-address

dmask

dest-mac-mask

] [

vid

vlan-id

] [

type

ether-type

] [

pri

priority

] [

sip

source-ip-address

sip-mask

source-ip-mask

]] [

dip

destination-ip-address

dip-mask

destination-ip-mask

]

[dscp

dscp-value

] [tos

tos-value

] [pre

pre-value

] [protocol

protocol

[s-port

s-port-number

s-port-mask

] [d-port

d-port-number

d-port-mask

] [tcpflag

tcpflag

]] [tseg

time-range-name

]

no access-list combined

acl-id-or-name

rule

rule-id