Home » TP-Link Manuals » Hubs & Switches » TP-Link T2600G-52TS TL-SG3452 » Manual Viewer

TP-Link T2600G-52TS TL-SG3452 T2600G-28TS V1 CLI Reference Guide - Page 219

access-list policy name

View all TP-Link T2600G-52TS TL-SG3452 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 219 highlights

deny -- The operation to discard packets. permit --The operation to forward packets. It is the default value. source-mac -- The source MAC address contained in the rule. source-mac-mask -- The source MAC address mask. It is required if you typed the source MAC address. destination-mac -- The destination MAC address contained in the rule. destination-mac-mask -- The destination MAC address mask. It is required if you typed the destination MAC address. vlan-id -- The VLAN ID contained in the rule, ranging from 1 to 4094. ethernet-type -- EtherType contained in the rule, in the format of 4-hex number. user-pri -- The user priority contained in the rule, ranging from 0 to 7. By default, it is not limited. time-segment -- The time-range for the rule to take effect. By default, it is not limited. Command Mode MAC Access-list Configuration Mode Example Create a MAC ACL whose ID is 20, and add Rule 10 for it. In the rule, the source MAC address is 00:01:3F:48:16:23, the source MAC address mask is 11:11:11:11:11:00, VLAN ID is 2, the user priority is 5, the time-range for the rule to take effect is "tRange1", and the packets match this rule will be forwarded by the switch: T2600G-28TS(config)# mac access-list 20 T2600G-28TS(config-mac-acl)# rule 10 permit smac 00:01:3F:48:16:23 smask 11:11:11:11:11:00 vid 2 pri 5 tseg tRange1 29.11 access-list policy name Description The access-list policy name command is used to add Policy. To delete the corresponding Policy, please use no access-list policy name command. A Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions together for effect. The operations here include stream mirror, stream condition, QoS Remarking and redirect. 203

Section	Page
Preface	17
Chapter 1 Using the CLI	20
1.1 Accessing the CLI	20
1.1.1 Logon by a console port	20
1.1.2 Logon by Telnet	22
1.1.3 Logon by SSH	26
1.2 CLI Command Modes	31
1.3 Security Levels	34
1.4 Conventions	35
1.4.1 Format Conventions	35
1.4.2 Special Characters	35
1.4.3 Parameter Format	35
Chapter 2 User Interface	36
2.1 enable	36
2.2 service password-encryption	36
2.3 enable password	37
2.4 enable secret	38
2.5 disable	39
2.6 configure	39
2.7 exit	40
2.8 end	40
2.9 history	40
2.10 history clear	41
Chapter 3 IEEE 802.1Q VLAN Commands	42
3.1 vlan	42
3.2 interface vlan	42
3.3 name	43
3.4 switchport mode	43
3.5 switchport access vlan	44
3.6 switchport trunk allowed vlan	45
3.7 switchport general allowed vlan	45
3.8 switchport pvid	46
3.9 show vlan summary	47
3.10 show vlan brief	47
3.11 show vlan	47
3.12 show interface switchport	48
Chapter 4 MAC-based VLAN Commands	49
4.1 mac-vlan mac-address	49
4.2 mac-vlan	49
4.3 show mac-vlan	50
4.4 show mac-vlan interface	51
Chapter 5 Protocol-based VLAN Commands	52
5.1 protocol-vlan template	52
5.2 protocol-vlan vlan	53
5.3 protocol-vlan group	53
5.4 show protocol-vlan template	54
5.5 show protocol-vlan vlan	54
Chapter 6 VLAN-VPN Commands	56
6.1 dot1q-tunnel	56
6.2 dot1q-tunnel tpid	56
6.3 dot1q-tunnel mapping	57
6.4 switchport dot1q-tunnel mapping	57
6.5 switchport dot1q-tunnel mode	58
6.6 show dot1q-tunnel	59
6.7 show dot1q-tunnel mapping	59
6.8 show dot1q-tunnel interface	60
Chapter 7 Private VLAN Commands	61
7.1 private-vlan primary	61
7.2 private-vlan community	61
7.3 private-vlan isolated	62
7.4 private-vlan association	62
7.5 switchport private-vlan	63
7.6 switchport private-vlan host-association	64
7.7 switchport private-vlan mapping	64
7.8 show vlan private-vlan	65
7.9 show vlan private-vlan interface	66
Chapter 8 GVRP Commands	67
8.1 gvrp	67
8.2 gvrp (interface)	67
8.3 gvrp registration	68
8.4 gvrp timer	68
8.5 show gvrp global	69
8.6 show gvrp interface	70
Chapter 9 Voice VLAN Commands	71
9.1 voice vlan	71
9.2 voice vlan aging	71
9.3 voice vlan priority	72
9.4 voice vlan mac-address	72
9.5 switchport voice vlan mode	73
9.6 switchport voice vlan security	74
9.7 show voice vlan	74
9.8 show voice vlan oui	75
9.9 show voice vlan switchport	75
Chapter 10 Etherchannel Commands	77
10.1 channel-group	77
10.2 port-channel load-balance	78
10.3 lacp system-priority	79
10.4 lacp port-priority	79
10.5 show etherchannel	80
10.6 show etherchannel load-balance	80
10.7 show lacp	81
10.8 show lacp sys-id	81
Chapter 11 User Management Commands	83
11.1 user name (password)	83
11.2 user name (secret)	84
11.3 user access-control ip-based	85
11.4 user access-control mac-based	86
11.5 user access-control port-based	86
11.6 line	87
11.7 password	88
11.8 login	89
11.9 login local	90
11.10 media-type rj45	90
11.11 telnet	91
11.12 show user account-list	91
11.13 show user configuration	92
11.14 show telnet-status	92
Chapter 12 HTTP and HTTPS Commands	93
12.1 ip http server	93
12.2 ip http max-users	93
12.3 ip http session	94
12.4 ip http secure-server	95
12.5 ip http secure-protocol	95
12.6 ip http secure-ciphersuite	96
12.7 ip http secure-max-users	96
12.8 ip http secure-session	97
12.9 ip http secure-server download certificate	98
12.10 ip http secure-server download key	98
12.11 show ip http configuration	99
12.12 show ip http secure-server	100
Chapter 13 ARP Commands	101
13.1 arp	101
13.2 clear arp-cache	101
13.3 arp timeout	102
13.4 show arp	102
13.5 show ip arp (interface)	103
13.6 show ip arp summary	103
Chapter 14 Binding Table Commands	105
14.1 ip source binding	105
14.2 ip dhcp snooping	106
14.3 ip dhcp snooping vlan	107
14.4 ip dhcp snooping information option	107
14.5 ip dhcp snooping information strategy	108
14.6 ip dhcp snooping information remote-id	108
14.7 ip dhcp snooping information circuit-id	109
14.8 ip dhcp snooping trust	110
14.9 ip dhcp snooping mac-verify	110
14.10 ip dhcp snooping limit rate	111
14.11 ip dhcp snooping decline rate	111
14.12 show ip source binding	112
14.13 show ip dhcp snooping	113
14.14 show ip dhcp snooping interface	113
Chapter 15 IP Verify Source Commands	115
15.1 ip verify source	115
15.2 show ip verify source	115
Chapter 16 ARP Inspection Commands	117
16.1 ip arp inspection(global)	117
16.2 ip arp inspection trust	117
16.3 ip arp inspection(interface)	118
16.4 ip arp inspection limit-rate	119
16.5 ip arp inspection recover	119
16.6 show ip arp inspection	120
16.7 show ip arp inspection interface	120
16.8 show ip arp inspection statistics	121
16.9 clear ip arp inspection statistics	121
Chapter 17 DoS Defend Commands	122
17.1 ip dos-prevent	122
17.2 ip dos-prevent type	122
17.3 show ip dos-prevent	123
Chapter 18 IEEE 802.1X Commands	124
18.1 dot1x system-auth-control	124
18.2 dot1x handshake	124
18.3 dot1x auth-method	125
18.4 dot1x guest-vlan(global)	126
18.5 dot1x quiet-period	126
18.6 dot1x timeout	127
18.7 dot1x max-reauth-req	128
18.8 dot1x	128
18.9 dot1x guest-vlan(interface)	129
18.10 dot1x port-control	129
18.11 dot1x port-method	130
18.12 radius	131
18.13 radius server-account	132
18.14 show dot1x global	133
18.15 show dot1x interface	133
18.16 show radius accounting	134
18.17 show radius authentication	134
Chapter 19 System Log Commands	135
19.1 logging buffer	135
19.2 logging buffer level	135
19.3 logging file flash	136
19.4 logging file flash frequency	137
19.5 logging file flash level	137
19.6 logging host index	138
19.7 logging console	139
19.8 logging console level	139
19.9 logging monitor	140
19.10 logging monitor level	140
19.11 clear logging	141
19.12 show logging local-config	142
19.13 show logging loghost	142
19.14 show logging buffer	143
19.15 show logging flash	143
Chapter 20 SSH Commands	145
20.1 ip ssh server	145
20.2 ip ssh version	145
20.3 ip ssh algorithm	146
20.4 ip ssh timeout	146
20.5 ip ssh max-client	147
20.6 ip ssh download	147
20.7 remove public-key	148
20.8 show ip ssh	149
Chapter 21 MAC Address Commands	150
21.1 mac address-table static	150
21.2 mac address-table aging-time	151
21.3 mac address-table filtering	151
21.4 mac address-table max-mac-count	152
21.5 show mac address-table	153
21.6 clear mac address-table	153
21.7 show mac address-table aging-time	154
21.8 show mac address-table max-mac-count	154
21.9 show mac address-table interface	155
21.10 show mac address-table count	155
21.11 show mac address-table address	156
21.12 show mac address-table vlan	156
Chapter 22 System Configuration Commands	158
22.1 system-time manual	158
22.2 system-time ntp	158
22.3 system-time dst predefined	160
22.4 system-time dst date	161
22.5 system-time dst recurring	162
22.6 hostname	163
22.7 location	163
22.8 contact-info	164
22.9 ip address	164
22.10 ip address-alloc	165
22.11 reset	166
22.12 reboot	166
22.13 copy running-config startup-config	167
22.14 copy startup-config tftp	167
22.15 copy tftp startup-config	168
22.16 boot application	168
22.17 remove backup-image	169
22.18 firmware upgrade	169
22.19 ping	170
22.20 tracert	171
22.21 show system-info	172
22.22 show image-info	173
22.23 show boot	173
22.24 show running-config	173
22.25 show startup-config	174
22.26 show system-time	174
22.27 show system-time dst	175
22.28 show system-time ntp	175
22.29 show cable-diagnostics interface gigabitEthernet	175
22.30 show cpu-utilization	176
22.31 show memory-utilization	176
Chapter 23 IPv6 Address Configuration Commands	178
23.1 ipv6 enable	178
23.2 ipv6 address autoconfig	178
23.3 ipv6 address link-local	179
23.4 ipv6 address dhcp	180
23.5 ipv6 address ra	180
23.6 ipv6 address eui-64	181
23.7 ipv6 address	181
23.8 show ipv6 interface	182
Chapter 24 Ethernet Configuration Commands	183
24.1 interface gigabitEthernet	183
24.2 interface range gigabitEthernet	183
24.3 description	184
24.4 shutdown	185
24.5 flow-control	185
24.6 media-type rj45	186
24.7 duplex	186
24.8 jumbo	187
24.9 speed	187
24.10 storm-control pps	188
24.11 storm-control	189
24.12 bandwidth	190
24.13 clear counters	190
24.14 show interface status	191
24.15 show interface counters	191
24.16 show interface configuration	192
24.17 show storm-control	192
24.18 show bandwidth	193
Chapter 25 QoS Commands	194
25.1 qos	194
25.2 qos dscp	194
25.3 qos queue cos-map	195
25.4 qos queue dscp-map	196
25.5 qos queue mode	197
25.6 qos queue weight	198
25.7 show qos interface	199
25.8 show qos cos-map	200
25.9 show qos dscp-map	200
25.10 show qos queue mode	200
25.11 show qos status	201
Chapter 26 Port Mirror Commands	202
26.1 monitor session destination interface	202
26.2 monitor session source interface	203
26.3 show monitor session	204
Chapter 27 Port Isolation Commands	205
27.1 port isolation	205
27.2 show port isolation interface	206
Chapter 28 Loopback Detection Commands	207
28.1 loopback-detection(global)	207
28.2 loopback-detection interval	207
28.3 loopback-detection recovery-time	208
28.4 loopback-detection(interface)	208
28.5 loopback-detection config	209
28.6 loopback-detection recover	210
28.7 show loopback-detection global	210
28.8 show loopback-detection interface	210
Chapter 29 ACL Commands	212
29.1 time-range	212
29.2 absolute	212
29.3 periodic	213
29.4 holiday	214
29.5 holiday(global)	214
29.6 access-list create	215
29.7 mac access-list	215
29.8 access-list standard	216
29.9 access-list extended	217
29.10 rule	218
29.11 access-list policy name	219
29.12 access-list policy action	220
29.13 redirect interface	221
29.14 s-condition	221
29.15 s-mirror	222
29.16 qos-remark	222
29.17 access-list bind acl(interface)	223
29.18 access-list bind acl(vlan)	223
29.19 access-list bind(interface)	224
29.20 access-list bind(vlan)	225
29.21 show access-list	225
29.22 show access-list policy	226
29.23 show access-list bind	226
Chapter 30 MSTP Commands	227
30.1 debug spanning-tree	227
30.2 spanning-tree(global)	228
30.3 spanning-tree(interface)	228
30.4 spanning-tree common-config	229
30.5 spanning-tree mode	230
30.6 spanning-tree mst configuration	230
30.7 instance	231
30.8 name	232
30.9 revision	232
30.10 spanning-tree mst instance	233
30.11 spanning-tree mst	233
30.12 spanning-tree priority	234
30.13 spanning-tree tc-defend	235
30.14 spanning-tree timer	235
30.15 spanning-tree hold-count	236
30.16 spanning-tree max-hops	237
30.17 spanning-tree bpdufilter	237
30.18 spanning-tree bpduguard	238
30.19 spanning-tree guard loop	238
30.20 spanning-tree guard root	239
30.21 spanning-tree guard tc	239
30.22 spanning-tree mcheck	240
30.23 show spanning-tree active	240
30.24 show spanning-tree bridge	241
30.25 show spanning-tree interface	241
30.26 show spanning-tree interface-security	242
30.27 show spanning-tree mst	242
Chapter 31 IGMP Snooping Commands	244
31.1 ip igmp snooping(global)	244
31.2 ip igmp snooping(interface)	244
31.3 ip igmp snooping rtime	245
31.4 ip igmp snooping mtime	245
31.5 ip igmp snooping report-suppression	246
31.6 ip igmp snooping immediate-leave	246
31.7 ip igmp snooping drop-unknown	247
31.8 ip igmp snooping last-listener query-inteval	247
31.9 ip igmp snooping last-listener query-count	248
31.10 ip igmp snooping vlan-config	248
31.11 ip igmp snooping multi-vlan-config	250
31.12 ip igmp snooping querier vlan	251
31.13 ip igmp snooping querier vlan (general query)	251
31.14 ip igmp snooping max-groups	252
31.15 ip igmp profile	253
31.16 deny	254
31.17 permit	254
31.18 range	254
31.19 ip igmp filter	255
31.20 clear ip igmp snooping statistics	256
31.21 show ip igmp snooping	256
31.22 show ip igmp snooping interface	256
31.23 show ip igmp snooping vlan	257
31.24 show ip igmp snooping multi-vlan	258
31.25 show ip igmp snooping groups	258
31.26 show ip igmp snooping querier	259
31.27 show ip igmp profile	260
Chapter 32 MLD Snooping Commands	261
32.1 ipv6 mld snooping(global)	261
32.2 ipv6 mld snooping(interface)	261
32.3 ipv6 mld snooping rtime	262
32.4 ipv6 mld snooping mtime	262
32.5 ipv6 mld snooping report-suppression	263
32.6 ipv6 mld snooping immediate-leave	263
32.7 ipv6 mld snooping drop-unknown	264
32.8 ipv6 mld snooping last-listener query-inteval	264
32.9 ipv6 mld snooping last-listener query-count	264
32.10 ipv6 mld snooping vlan-config	265
32.11 ipv6 mld snooping multi-vlan-config	266
32.12 ipv6 mld snooping querier vlan	267
32.13 ipv6 mld snooping querier vlan (general query)	268
32.14 ipv6 mld snooping max-groups	269
32.15 ipv6 mld profile	270
32.16 deny	270
32.17 permit	271
32.18 range	271
32.19 ipv6 mld filter	272
32.20 clear ipv6 mld snooping statistics	272
32.21 show ipv6 mld snooping	273
32.22 show ipv6 mld snooping interface	273
32.23 show ipv6 mld snooping vlan	274
32.24 show ipv6 mld snooping multi-vlan	274
32.25 show ipv6 mld snooping groups	275
32.26 show ipv6 mld snooping querier	275
32.27 show ipv6 mld profile	276
Chapter 33 SNMP Commands	277
33.1 snmp-server	277
33.2 snmp-server view	277
33.3 snmp-server group	278
33.4 snmp-server user	279
33.5 snmp-server community	281
33.6 snmp-server host	281
33.7 snmp-server engineID	283
33.8 snmp-server traps snmp	284
33.9 snmp-server traps link-status	285
33.10 snmp-server traps	285
33.11 snmp-server traps mac	286
33.12 snmp-server traps vlan	287
33.13 rmon history	288
33.14 rmon event	289
33.15 rmon alarm	290
33.16 rmon statistics	291
33.17 show snmp-server	292
33.18 show snmp-server view	292
33.19 show snmp-server group	293
33.20 show snmp-server user	293
33.21 show snmp-server community	293
33.22 show snmp-server host	294
33.23 show snmp-server engineID	294
33.24 show rmon history	295
33.25 show rmon event	295
33.26 show rmon alarm	296
33.27 show rmon statistics	296
Chapter 34 LLDP Commands	297
34.1 lldp	297
34.2 lldp hold-multiplier	297
34.3 lldp timer	298
34.4 lldp receive	299
34.5 lldp transmit	299
34.6 lldp snmp-trap	300
34.7 lldp tlv-select	300
34.8 lldp med-fast-count	301
34.9 lldp med-status	302
34.10 lldp med-tlv-select	302
34.11 lldp med-location	303
34.12 show lldp	304
34.13 show lldp interface	304
34.14 show lldp local-information interface	305
34.15 show lldp neighbor-information interface	305
34.16 show lldp traffic interface	306
Chapter 35 Static Routes Commands	307
35.1 interface vlan	307
35.2 interface loopback	307
35.3 switchport	308
35.4 interface port-channel	308
35.5 interface range port-channel	309
35.6 shutdown	309
35.7 ip route	310
35.8 description	311
35.9 show interface vlan	311
35.10 show ip interface	312
35.11 show ip interface brief	312
35.12 show ip route	313
35.13 show ip route specify	313
35.14 show ip route summary	314
Chapter 36 SDM Template Commands	315
36.1 sdm prefer	315