Home » TP-Link Manuals » Hubs & Switches » TP-Link TL-SG3424P » Manual Viewer

TP-Link TL-SG3424P TL-SG3424P V1 CLI Guide - Page 153

acl rule mac-acl, Example, Description, Syntax, Parameter

Add to My Manuals
Save this manual to your list of manuals

Page 153 highlights

Example Create a MAC ACL whose ID is 20: TP-LINK(config)# acl create 20 acl rule mac-acl Description The acl rule mac-acl command is used to add MAC ACL rule. To delete the corresponding rule, please use no acl rule mac-acl command. MAC ACLs analyze and process packets based on a series of match conditions, which can be the source MAC addresses, destination MAC addresses, VLAN ID, and EtherType carried in the packets. Syntax acl rule mac-acl {acl-id} {rule-id} [op { discard | permit }] [[smac source-mac] {smask source-mac-mask}] [[dmac destination-mac] {dmask destination-mac-mask}] [vid vlan-id] [type ethernet-type] [pri user-pri] [tseg time-segment] no acl rule mac-acl {acl-id} {rule-id} Parameter acl-id -- The desired MAC ACL for configuration. rule-id -- The rule ID. op -- The operation for the switch to process packets which match the rules. There are two options, discard and permit. Discard means discarding packets, and permit means forwarding packets. By default, the option is permit. source-mac -- The source MAC address contained in the rule. source-mac-mask -- The source MAC address mask. It is required if you typed the source MAC address. destination-mac -- The destination MAC address contained in the rule. destination-mac-mask -- The destination MAC address mask. It is required if you typed the destination MAC address. vlan-id -- The VLAN ID contained in the rule, ranging from 1 to 4094. ethernet-type -- EtherType contained in the rule, in the format of 4-hex number. user-pri -- The user priority contained in the rule, ranging from 0 to 7. By default, it is not limited. time-segment -- The time-range for the rule to take effect. By default, it is 140

Section	Page
Preface	14
Chapter 1 Using the CLI	17
1.1 Accessing the CLI	17
1.1.1 Logon by a console port	17
1.1.2 Logon by Telnet	19
1.2 CLI Command Modes	21
1.3 Security Levels	23
1.4 Conventions	24
1.4.1 Format Conventions	24
1.4.2 Special Characters	24
1.4.3 Parameter Format	24
Chapter 2 User Interface	25
enable	25
enable password	25
disable	26
configure	26
exit	26
end	27
Chapter 3 IEEE 802.1Q VLAN Commands	28
vlan database	28
vlan	28
interface vlan	29
description	29
switchport type	30
switchport allowed vlan	30
switchport pvid	31
switchport general egress-rule	31
show vlan	32
show interface switchport	32
Chapter 4 MAC VLAN Commands	33
mac-vlan add	33
mac-vlan remove	33
mac-vlan modify	34
show mac-vlan	34
Chapter 5 Protocol VLAN Commands	35
protocol-vlan template	35
protocol-vlan vlan	35
show protocol-vlan template	36
show protocol-vlan vlan	36
Chapter 6 Voice VLAN Commands	38
voice-vlan enable	38
voice-vlan aging-time	38
voice-vlan priority	39
voice-vlan oui	39
switchport voice-vlan mode	40
switchport voice-vlan security	41
show voice-vlan global	41
show voice-vlan oui	41
show voice-vlan switchport	42
Chapter 7 GVRP Commands	43
gvrp	43
gvrp (interface)	43
gvrp registration	44
gvrp timer	44
show gvrp global	45
show gvrp interface	46
Chapter 8 LAG Commands	47
interface link-aggregation	47
interface range link-aggregation	47
link-aggregation	48
link-aggregation hash-algorithm	49
description	49
show interfaces link-aggregation	50
Chapter 9 LACP Commands	51
lacp system-priority	51
lacp admin-key	51
lacp port-priority	52
show lacp interface	52
show lacp system-priority	53
Chapter 10 User Manage Commands	54
user add	54
user remove	55
user modify status	55
user modify type	56
user modify password	56
user access-control disable	57
user access-control ip-based	57
user access-control mac-based	58
user access-control port-based	58
user max-number	59
user idle-timeout	59
show user account-list	60
show user configuration	60
Chapter 11 Binding Table Commands	62
binding-table user-bind	62
binding-table remove	63
dhcp-snooping	63
dhcp-snooping global	64
dhcp-snooping information enable	65
dhcp-snooping information strategy	65
dhcp-snooping information user-defined	66
dhcp-snooping information remote-id	66
dhcp-snooping information circuit-id	67
dhcp-snooping trusted	67
dhcp-snooping mac-verify	68
dhcp-snooping rate-limit	68
dhcp-snooping decline	69
show binding-table	69
show dhcp-snooping global	70
show dhcp-snooping information	70
show dhcp-snooping interface	71
Chapter 12 ARP Inspection Commands	72
arp detection (global)	72
arp detection trust-port	72
arp detection (interface)	73
arp detection limit-rate	73
arp detection recover	74
show arp detection global	75
show arp detection interface	75
show arp detection statistic	75
show arp detection statistic reset	76
Chapter 13 DoS Defend Command	77
dos-prevent	77
dos-prevent type	77
show dos-prevent	78
Chapter 14 IEEE 802.1X Commands	79
dot1x	79
dot1x auth-method	79
dot1x guest-vlan	80
dot1x quiet-period	81
dot1x timer	81
dot1x retry	82
dot1x(interface)	82
dot1x guest-vlan	83
dot1x port-control	83
dot1x port-method	84
radius authentication primary-ip	85
radius authentication secondary-ip	85
radius authentication port	86
radius authentication key	86
radius accounting enable	87
radius accounting primary-ip	88
radius accounting secondary-ip	88
radius accounting port	89
radius accounting key	89
radius response-timeout	90
show dot1x global	90
show dot1x interface	91
show radius authentication	91
show radius accounting	92
Chapter 15 Log Commands	93
logging local buffer	93
logging local flash	93
logging clear	94
logging loghost	95
show logging local-config	95
show logging loghost	96
show logging buffer level	96
show logging flash level	97
Chapter 16 SSH Commands	98
ssh server enable	98
ssh version	98
ssh idle-timeout	99
ssh max-client	99
ssh download	100
show ssh	100
Chapter 17 SSL Commands	101
ssl enable	101
ssl download certificate	101
ssl download key	102
show ssl	102
Chapter 18 Address Commands	104
bridge address port-security	104
bridge address static	105
bridge aging-time	105
bridge address filtering	106
show bridge port-security	107
show bridge address	107
show bridge aging-time	108
Chapter 19 System Commands	109
system-descript	109
system-time gmt	109
system-time manual	110
system-time dst	110
ip address	111
ip management-vlan	112
ip dhcp-alloc	112
ip bootp-alloc	112
reset	113
reboot	113
user-config backup	114
user-config load	114
user-config save	115
firmware upgrade	115
ping	116
tracert	116
loopback	117
show system-info	117
show ip address	118
show system-time	118
show system-time dst	119
Chapter 20 Ethernet Configuration Commands	120
interface ethernet	120
interface range ethernet	120
description	121
shutdown	121
flow-control	122
negotiation	122
storm-control	123
storm-control disable bc-rate	124
storm-control disable mc-rate	124
storm-control disable ul-rate	125
port rate-limit	125
port rate-limit disable ingress	126
port rate-limit disable egress	126
show interface configuration	126
show interface status	127
show interface counters	127
show storm-control ethernet	128
show port rate-limit	128
Chapter 21 QoS Commands	130
qos	130
qos dot1p config	130
qos dscp enable	131
qos dscp config	132
qos scheduler	133
show qos port-based	134
show qos dot1p	134
show qos dscp	134
show qos scheduler	135
Chapter 22 Port Mirror Commands	136
mirror add	136
mirror remove group	137
mirror remove mirrored	137
show mirror	138
Chapter 23 Port isolation Commands	139
port isolation	139
show port isolation	139
Chapter 24 PoE Commands	141
power inline consumption (global configuration)	141
power inline disconnect-method	141
power inline supply status	142
power inline priority	142
power inline consumption (interface configuration)	143
power inline time-segment	143
power inline profile	144
power profile	144
power time-segment	145
power holiday	146
show power inline	147
show power inline configuration	147
show power inline information	148
show power time-segment	148
show power holiday	148
show power profile	149
Chapter 25 ACL Commands	150
acl time-segment	150
acl edit time-segment	151
acl holiday	152
acl create	152
acl rule mac-acl	153
acl edit rule mac-acl	154
acl rule std-acl	155
acl edit rule std-acl	156
acl policy policy-add	157
acl policy action-add	158
acl edit action	159
acl bind to-port	159
acl bind to-vlan	160
show acl time-segment	160
show acl holiday	161
show acl config	161
show acl bind	162
Chapter 26 MSTP Commands	163
spanning-tree global	163
spanning-tree common-config	164
spanning-tree region	165
spanning-tree msti	166
spanning-tree msti	167
spanning-tree tc-defend	167
spanning-tree security	168
spanning-tree mcheck	169
show spanning-tree global-info	169
show spanning-tree global-config	170
show spanning-tree port-config	170
show spanning-tree region	171
show spanning-tree msti config	171
show spanning-tree msti port	171
show spanning-tree security tc-defend	172
show spanning-tree security port-defend	172
Chapter 27 IGMP Commands	174
igmp-snooping global	174
igmp-snooping config	174
igmp-snooping vlan-config-add	175
igmp-snooping vlan-config	176
igmp-snooping multi-vlan-config	177
igmp-snooping static-entry-add	178
igmp-snooping filter-add	179
igmp-snooping filter-config	179
igmp-snooping filter	180
show igmp-snooping global-config	181
show igmp-snooping port-config	181
show igmp-snooping vlan-config	182
show igmp-snooping multi-vlan	182
show igmp-snooping multi-ip-list	182
show igmp-snooping filter-ip-addr	183
show igmp-snooping port-filter	183
show igmp-snooping packet-stat	184
show igmp-snooping packet-stat-clear	184
Chapter 28 SNMP Commands	185
snmp global	185
snmp view-add	186
snmp group-add	186
snmp user-add	188
snmp community-add	189
snmp notify-add	190
snmp-rmon history sample-cfg	191
snmp-rmon history owner	192
snmp-rmon history enable	192
snmp-rmon event user	193
snmp-rmon event description	193
snmp-rmon event type	194
snmp-rmon event owner	195
snmp-rmon event enable	195
snmp-rmon alarm config	196
snmp-rmon alarm owner	197
snmp-rmon alarm enable	198
show snmp global-config	198
show snmp view	199
show snmp group	199
show snmp user	199
show snmp community	200
show snmp destination-host	200
show snmp-rmon history	200
show snmp-rmon event	201
show snmp-rmon alarm	201
Chapter 29 LLDP Commands	203
lldp enable	203
lldp hold-multiplier	203
lldp timer	204
lldp med-fast-count	205
lldp admin-status	205
lldp snmp-trap	206
lldp tlv-select	207
lldp med-status	207
lldp med-tlv-select	208
lldp med-location	208
show lldp global	209
show lldp interface	209
show lldp local-information	210
show lldp neighbor-information	210
show lldp statistics	211
show lldp med fast-count	211
show lldp med interface	212
show lldp med local-information	212
show lldp med neighbor-information	213
Chapter 30 Cluster Commands	214
cluster ndp	214
cluster ntdp	215
cluster explore	216
cluster	216
cluster manage role-change	217
show cluster ndp global	217
show cluster ndp port-status	218
show cluster neighbour	218
show cluster ntdp global	218
show cluster ntdp port-status	219
show cluster ntdp device	219

Match case Limit results 1 per page

140

Example

Create a MAC ACL whose ID is 20:

TP-LINK(config)# acl create

acl rule mac-acl

Description

The

acl rule mac-acl

command is used to add MAC ACL rule. To delete the

corresponding rule, please use

no acl rule mac-acl

command. MAC ACLs

analyze and process packets based on a series of match conditions, which can

be the source MAC addresses, destination MAC addresses, VLAN ID, and

EtherType carried in the packets.

Syntax

acl rule mac-acl

{

acl-id

} {

rule-id

} [

{ discard | permit }] [[

smac

source-mac

]

{

smask

source-mac-mask

}] [[

dmac

destination-mac

] {

dmask

destination-mac-mask

}] [

vid

vlan-id

] [

type

ethernet-type

] [

pri

user-pri

] [

tseg

time-segment

]

no acl rule mac-acl

{

acl-id

} {

rule-id

}

Parameter

acl-id

——

The desired MAC ACL for configuration.

rule-id

——

The rule ID.

——

The operation for the switch to process packets which match the rules.

There are two options, discard and permit. Discard means discarding packets,

and permit means forwarding packets. By default, the option is permit.

source-mac

——

The source MAC address contained in the rule.

source-mac-mask

——

The source MAC address mask. It is required if you

typed the source MAC address.

destination-mac

——

The destination MAC address contained in the rule.

destination-mac-mask

——

The destination MAC address mask. It is required

if you typed the destination MAC address.

vlan-id

——

The VLAN ID contained in the rule, ranging from 1 to 4094.

ethernet-type

——

EtherType contained in the rule, in the format of 4-hex

number.

user-pri

——

The user priority contained in the rule, ranging from 0 to 7. By

default, it is not limited.

time-segment

——

The time-range for the rule to take effect. By default, it is