TP-Link T2600G-52TS TL-SG3452 T2600G-28TS V1 CLI Reference Guide - Page 218

Command Mode, Example, Description, Syntax, Parameter

Page 218 highlights

time-segment -- The time-range for the rule to take effect. By default, it is not limited. frag -- Enable/Disable Fragment. By default, it is disabled. If Fragment is enabled, this rule will process all the fragments and the last piece of fragment will be always forwarded. dscp -- Specify the dscp value, ranging from 0 to 63. s-port -- The source port number. d-port -- The destination port number. tcpflag -- Specify the flag value when using TCP protocol. protocol -- Configure the value of the matching protocol. tos -- Enter the IP ToS contained in the rule. pre -- Enter the IP Precedence contained in the rule. Command Mode Global Configuration Mode Example Create an Extended-IP ACL whose ID is 2220, and add Rule 10 for it. In the rule, the source IP address is 192.168.0.100, the source IP address mask is 255.255.255.0, the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: T2600G-28TS(config)# access-list create 2220 T2600G-28TS(config)# access-list extended 2220 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 tseg tSeg1 29.10 rule Description The rule command is used to configure MAC ACL rule. To delete the corresponding rule, please use no rule command. Syntax rule rule-id { deny | permit } [[ smac source-mac ] smask source-mac-mask ] [[ dmac destination-mac ] dmask destination-mac-mask ] [ vid vlan-id ] [ type ethernet-type ] [ pri user-pri ] [ tseg time-segment ] no rule rule-id Parameter rule-id -- The rule ID. 202

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316

202
time-segment
—— The time-range for the rule to take effect. By default, it is not
limited.
frag —— Enable/Disable Fragment. By default, it is disabled. If Fragment is
enabled, this rule will process all the fragments and the last piece of fragment
will be always forwarded.
dscp
—— Specify the dscp value, ranging from 0 to 63.
s-port
—— The source port number.
d-port
—— The destination port number.
tcpflag
—— Specify the flag value when using TCP protocol.
protocol
—— Configure the value of the matching protocol.
tos
—— Enter the IP ToS contained in the rule.
pre
—— Enter the IP Precedence contained in the rule.
Command Mode
Global Configuration Mode
Example
Create an Extended-IP ACL whose ID is 2220, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the
packets match this rule will be forwarded by the switch:
T2600G-28TS(config)# access-list create
2220
T2600G-28TS(config)# access-list extended
2220
rule
10 permit
sip
192.168.0.100
smask
255.255.255.0
tseg
tSeg1
29.10
rule
Description
The
rule
command is used to configure MAC ACL rule. To delete the
corresponding rule, please use
no rule
command.
Syntax
rule
rule-id
{ deny | permit } [[
smac
source-mac
]
smask
source-mac-mask
]
[[
dmac
destination-mac
]
dmask
destination-mac-mask
] [
vid
vlan-id
] [
type
ethernet-type
] [
pri
user-pri
] [
tseg
time-segment
]
no rule
rule-id
Parameter
rule-id
—— The rule ID.