Home » TP-Link Manuals » Hubs & Switches » TP-Link TL-SG3216 » Manual Viewer

TP-Link TL-SG3216 TL-SG3216 V1 CLI Reference Guide - Page 140

acl policy policy-add

Add to My Manuals
Save this manual to your list of manuals

Page 140 highlights

acl-id -- The desired Standard-IP ACL for configuration. rule-id -- The rule ID. op -- The operation for the switch to process packets which match the rules. There are two options, discard and permit. Discard means discarding packets, and permit means forwarding packets. By default, the option is permit. source-ip -- The source IP address contained in the rule. source-ip-mask -- The source IP address mask. It is required if you typed the source IP address. destination-ip -- The destination IP address contained in the rule. destination-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. time-segment -- The time-range for the rule to take effect. By default, it is not limited. Command Mode Global Configuration Mode Example Create a Standard-IP ACL whose ID is 120, and add Rule 10 for it. In the rule, the source IP address is 192.168.0.100, the source IP address mask is 255.255.255.0, the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: TP-LINK(config)# acl create 120 TP-LINK(config)# acl rule std-acl 120 10 op permit dip 192.168.0.100 dmask 255.255.255.0 tseg tSeg1 acl policy policy-add Description The acl policy policy-add command is used to add Policy. To delete the corresponding Policy, please use no acl policy policy-add command. A Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions together for effect. The operations here include stream mirror, stream condition, QoS Remarking and redirect. Syntax acl policy policy-add name no acl policy policy-add name 129

Section	Page
Preface	12
Chapter 1 Using the CLI	15
1.1 Accessing the CLI	15
1.1.1 Logon by a console port	15
1.1.2 Logon by Telnet	17
1.2 CLI Command Modes	19
1.3 Security Levels	21
1.4 Conventions	22
1.4.1 Format Conventions	22
1.4.2 Special Characters	22
1.4.3 Parameter Format	22
Chapter 2 User Interface	23
enable	23
enable password	23
disable	24
configure	24
exit	24
end	25
Chapter 3 IEEE 802.1Q VLAN Commands	26
vlan database	26
vlan	26
interface vlan	27
description	27
switchport type	28
switchport allowed vlan	28
switchport pvid	29
switchport general egress-rule	29
show vlan	30
show interface switchport	30
Chapter 4 MAC VLAN Commands	31
mac-vlan add	31
mac-vlan remove	31
mac-vlan modify	32
show mac-vlan	32
Chapter 5 Protocol VLAN Commands	33
protocol-vlan template	33
protocol-vlan vlan	33
show protocol-vlan template	34
show protocol-vlan vlan	34
Chapter 6 Voice VLAN Commands	36
voice-vlan enable	36
voice-vlan aging-time	36
voice-vlan priority	37
voice-vlan oui	37
switchport voice-vlan mode	38
switchport voice-vlan security	39
show voice-vlan global	39
show voice-vlan oui	39
show voice-vlan switchport	40
Chapter 7 GVRP Commands	41
gvrp	41
gvrp (interface)	41
gvrp registration	42
gvrp timer	42
show gvrp global	43
show gvrp interface	44
Chapter 8 LAG Commands	45
interface link-aggregation	45
interface range link-aggregation	45
link-aggregation	46
link-aggregation hash-algorithm	47
description	47
show interfaces link-aggregation	48
Chapter 9 LACP Commands	49
lacp	49
lacp (interface)	49
lacp admin-key	50
lacp system-priority	50
lacp port-priority	51
show lacp	51
show lacp interface	52
Chapter 10 User Manage Commands	53
user add	53
user remove	54
user modify status	54
user modify type	55
user modify password	55
user access-control disable	56
user access-control ip-based	56
user access-control mac-based	57
user access-control port-based	57
user max-number	58
user idle-timeout	58
show user account-list	59
show user configuration	59
Chapter 11 Binding Table Commands	61
binding-table user-bind	61
binding-table remove	62
dhcp-snooping	62
dhcp-snooping global	63
dhcp-snooping information enable	64
dhcp-snooping information strategy	64
dhcp-snooping information user-defined	65
dhcp-snooping information remote-id	65
dhcp-snooping information circuit-id	66
dhcp-snooping trusted	66
dhcp-snooping mac-verify	67
dhcp-snooping rate-limit	67
dhcp-snooping decline	68
show binding-table	68
show dhcp-snooping global	69
show dhcp-snooping information	69
show dhcp-snooping interface	70
Chapter 12 ARP Inspection Commands	71
arp detection (global)	71
arp detection trust-port	71
arp detection (interface)	72
arp detection limit-rate	72
arp detection recover	73
show arp detection global	74
show arp detection interface	74
show arp detection statistic	74
show arp detection statistic reset	75
Chapter 13 DoS Defend Command	76
dos-prevent	76
dos-prevent type	76
show dos-prevent	77
Chapter 14 IEEE 802.1X Commands	78
dot1x	78
dot1x authentication-method	78
dot1x guest-vlan	79
dot1x quiet-period	80
dot1x timer	80
dot1x retry	81
dot1x(interface)	81
dot1x guest-vlan	82
dot1x port-control	82
dot1x port-method	83
radius authentication primary-ip	84
radius authentication secondary-ip	84
radius authentication port	85
radius authentication key	85
radius accounting enable	86
radius accounting primary-ip	87
radius accounting secondary-ip	87
radius accounting port	88
radius accounting key	88
radius response-timeout	89
show dot1x global	89
show dot1x interface	90
show radius authentication	90
show radius accounting	91
Chapter 15 Log Commands	92
logging local buffer	92
logging local flash	92
logging clear	93
logging loghost	94
show logging local-config	94
show logging loghost	95
show logging buffer level	95
show logging flash level	96
Chapter 16 SSH Commands	97
ssh server enable	97
ssh version	97
ssh idle-timeout	98
ssh max-client	98
ssh download	99
show ssh	99
Chapter 17 SSL Commands	100
ssl enable	100
ssl download certificate	100
ssl download key	101
show ssl	101
Chapter 18 Address Commands	103
bridge address port-security	103
bridge address static	104
bridge aging-time	104
bridge address filtering	105
show bridge port-security	106
show bridge address	106
show bridge aging-time	107
Chapter 19 System Commands	108
system-descript	108
system-time gmt	108
system-time manual	109
ip address	109
ip dhcp-alloc	110
ip bootp-alloc	110
reset	111
reboot	111
user-config backup	112
user-config load	112
user-config save	113
firmware upgrade	113
ping	114
tracert	114
loopback	115
show system-info	115
show ip address	116
Chapter 20 Ethernet Configuration Commands	117
interface ethernet	117
interface range ethernet	117
description	118
shutdown	118
flow-control	119
negotiation	119
storm-control	120
storm-control disable bc-rate	121
storm-control disable mc-rate	121
storm-control disable ul-rate	122
port rate-limit	122
port rate-limit disable ingress	123
port rate-limit disable egress	123
show interface configuration	123
show interface status	124
show interface counters	124
show storm-control ethernet	125
show port rate-limit	125
Chapter 21 QoS Commands	127
qos	127
qos dot1p config	127
qos dscp enable	128
qos dscp config	129
qos scheduler	130
show qos port-based	131
show qos dot1p	131
show qos dscp	131
show qos scheduler	132
Chapter 22 Port Mirror Commands	133
mirror add	133
mirror remove group	134
mirror remove mirrored	134
show mirror	135
Chapter 23 ACL Commands	136
acl time-segment	136
acl holiday	137
acl create	137
acl rule mac-acl	138
acl rule std-acl	139
acl policy policy-add	140
acl policy action-add	141
acl bind to-port	142
acl bind to-vlan	142
show acl time-segment	143
show acl holiday	143
show acl config	144
show acl bind	144
Chapter 24 MSTP Commands	145
spanning-tree global	145
spanning-tree common-config	146
spanning-tree region	147
spanning-tree msti	148
spanning-tree msti	149
spanning-tree tc-defend	149
spanning-tree security	150
spanning-tree mcheck	151
show spanning-tree global-info	151
show spanning-tree global-config	152
show spanning-tree port-config	152
show spanning-tree region	153
show spanning-tree msti config	153
show spanning-tree msti port	153
show spanning-tree security tc-defend	154
show spanning-tree security port-defend	154
Chapter 25 IGMP Commands	156
igmp-snooping global	156
igmp-snooping config	156
igmp-snooping vlan-config-add	157
igmp-snooping vlan-config	158
igmp-snooping multi-vlan-config	159
igmp-snooping static-entry-add	160
igmp-snooping filter-add	161
igmp-snooping filter-config	161
igmp-snooping filter	162
show igmp-snooping global-config	163
show igmp-snooping port-config	163
show igmp-snooping vlan-config	164
show igmp-snooping multi-vlan	164
show igmp-snooping multi-ip-list	164
show igmp-snooping filter-ip-addr	165
show igmp-snooping port-filter	165
show igmp-snooping packet-stat	166
show igmp-snooping packet-stat-clear	166
Chapter 26 SNMP Commands	167
snmp global	167
snmp view-add	168
snmp group-add	168
snmp user-add	170
snmp community-add	171
snmp notify-add	172
snmp-rmon history sample-cfg	173
snmp-rmon history owner	174
snmp-rmon history enable	174
snmp-rmon event user	175
snmp-rmon event description	175
snmp-rmon event type	176
snmp-rmon event owner	177
snmp-rmon event enable	177
snmp-rmon alarm config	178
snmp-rmon alarm owner	179
snmp-rmon alarm enable	180
show snmp global-config	180
show snmp view	181
show snmp group	181
show snmp user	181
show snmp community	182
show snmp destination-host	182
show snmp-rmon history	182
show snmp-rmon event	183
show snmp-rmon alarm	183
Chapter 27 Cluster Commands	185
cluster ndp	185
cluster ntdp	186
cluster explore	187
cluster	187
cluster manage role-change	188
show cluster ndp global	188
show cluster ndp port-status	189
show cluster neighbour	189
show cluster ntdp global	189
show cluster ntdp port-status	190
show cluster ntdp device	190