Home » TP-Link Manuals » Hubs & Switches » TP-Link TL-SG5428 » Manual Viewer

TP-Link TL-SG5428 TL-SG5428 V1 CLI Reference Guide - Page 151

acl rule mac-acl

Add to My Manuals
Save this manual to your list of manuals

Page 151 highlights

be Standard-IP ACL, and 200-299 must be Extend-IP ACL. Command Mode Global Configuration Mode Example Create a MAC ACL whose ID is 20: TP-LINK(config)# acl create 20 acl rule mac-acl Description The acl rule mac-acl command is used to add MAC ACL rule. To delete the corresponding rule, please use no acl rule mac-acl command. MAC ACLs analyze and process packets based on a series of match conditions, which can be the source MAC addresses, destination MAC addresses, VLAN ID, and EtherType carried in the packets. Syntax acl rule mac-acl {acl-id} {rule-id} [op {discard | permit }] [[smac source-mac] {smask source-mac-mask}] [[dmac destination-mac] {dmask destination-mac-mask}] [vid vlan-id] [type Ethernet-type] [pri user-pri] [tseg time-segment] no acl rule mac-acl {acl-id} {rule-id} Parameter acl-id -- The desired MAC ACL for configuration. rule-id -- The rule ID. op -- The operation for the switch to process packets which match the rules. There are two options, discard and permit. Discard means discarding packets, and permit means forwarding packets. By default, the option is permit. source-mac -- The source MAC address contained in the rule. source-mac-mask -- The source MAC address mask. It is required if you typed the source MAC address. destination-mac -- The destination MAC address contained in the rule. destination-mac-mask -- The destination MAC address mask. It is required if you typed the destination MAC address. vlan-id -- The VLAN ID contained in the rule, ranging from 1 to 4094. Ethernet-type -- EtherType contained in the rule, in the format of 4-hex 139

Section	Page
Preface	13
Chapter 1 Using the CLI	16
1.1 Accessing the CLI	16
1.1.1 Logon by a console port	16
1.1.2 Logon by Telnet	18
1.2 CLI Command Modes	20
1.3 Security Levels	22
1.4 Conventions	22
1.4.1 Format Conventions	22
1.4.2 Special Characters	23
1.4.3 Parameter Format	23
Chapter 2 User Interface	24
enable	24
enable password	24
disable	25
configure	25
exit	25
end	26
Chapter 3 IEEE 802.1Q VLAN Commands	27
vlan database	27
vlan	27
interface vlan	28
description	28
switchport type	29
switchport allowed vlan	29
switchport pvid	30
switchport general egress-rule	30
show vlan	31
show interface switchport	31
Chapter 4 Protocol VLAN Commands	32
protocol-vlan template	32
protocol-vlan vlan	32
protocol-vlan interface	33
show protocol-vlan template	34
show protocol-vlan vlan	34
show protocol-vlan interface	34
Chapter 5 VLAN-VPN Commands	36
vlan-vpn enable	36
vlan-vpn tpid	36
vlan-vpn interface	37
vlan-vpn uplink	37
show vlan-vpn global	38
show vlan-vpn uplink	38
show vlan-vpn interface	39
Chapter 6 Voice VLAN Commands	40
voice-vlan enable	40
voice-vlan aging-time	40
voice-vlan oui	41
switchport voice-vlan mode	42
switchport voice-vlan security	42
show voice-vlan global	43
show voice-vlan oui	43
show voice-vlan switchport	43
Chapter 7 Private VLAN Commands	45
private-vlan	45
switchport private-vlan	45
show private-vlan	46
show private-vlan switchport	46
Chapter 8 GVRP Commands	48
gvrp	48
gvrp (interface)	48
gvrp registration	49
gvrp timer	49
show gvrp global	50
show gvrp interface	51
Chapter 9 LAG Commands	52
interface link-aggregation	52
interface range link-aggregation	52
link-aggregation	53
link-aggregation hash-algorithm	54
description	54
show interface link-aggregation	55
Chapter 10 LACP Commands	56
lacp system-priority	56
lacp (interface)	56
lacp admin-key	57
lacp port-priority	57
show lacp system-priority	58
show lacp interface	58
Chapter 11 User Manage Commands	60
user add	60
user remove	61
user modify status	61
user modify type	62
user modify password	62
user access-control disable	63
user access-control ip-based	63
user access-control mac-based	64
user access-control port-based	64
user max-number	65
user idle-timeout	65
show user account-list	66
show user configuration	66
Chapter 12 Binding Table Commands	68
binding-table user-bind	68
binding-table remove	69
dhcp-snooping	69
dhcp-snooping global	70
dhcp-snooping information enable	71
dhcp-snooping information strategy	71
dhcp-snooping information user-defined	72
dhcp-snooping information remote-id	72
dhcp-snooping information circuit-id	73
dhcp-snooping trusted	73
dhcp-snooping mac-verify	74
dhcp-snooping rate-limit	74
dhcp-snooping decline	75
show binding-table	75
show dhcp-snooping global	76
show dhcp-snooping information	76
show dhcp-snooping interface	77
Chapter 13 ARP Inspection Commands	78
arp detection (global)	78
arp detection trust-port	78
arp detection (interface)	79
arp detection limit-rate	79
arp detection recover	80
show arp detection global	81
show arp detection interface	81
show arp detection statistic	81
show arp detection statistic reset	82
Chapter 14 IP Source Guard Commands	83
ip source guard	83
show ip source guard	84
Chapter 15 DoS Defend Command	85
dos-prevent	85
dos-prevent type	85
show dos-prevent	86
Chapter 16 IEEE 802.1X Commands	87
dot1x (global)	87
dot1x auth-method	87
dot1x guest-vlan	88
dot1x quiet-period	89
dot1x timer	89
dot1x retry	90
dot1x (interface)	90
dot1x guest-vlan	91
dot1x port-control	91
dot1x port-method	92
radius authentication primary-ip	93
radius authentication secondary-ip	93
radius authentication port	94
radius authentication key	95
radius accounting enable	95
radius accounting primary-ip	96
radius accounting secondary-ip	96
radius accounting port	97
radius accounting key	97
radius response-timeout	98
show dot1x global	99
show dot1x interface	99
show radius authentication	99
show radius accounting	100
Chapter 17 Log Commands	101
logging local buffer	101
logging local flash	101
logging clear	102
logging loghost	103
show logging local-config	103
show logging loghost	104
show logging buffer	104
show logging flash	105
Chapter 18 SSH Commands	106
ssh server enable	106
ssh version	106
ssh idle-timeout	107
ssh max-client	107
ssh download	108
show ssh	108
Chapter 19 SSL Commands	109
ssl enable	109
ssl download certificate	109
ssl download key	110
show ssl	110
Chapter 20 Address Commands	112
bridge address port-security	112
bridge address static	113
bridge aging-time	114
bridge address filtering	114
show bridge port-security	115
show bridge address	115
show bridge aging-time	116
Chapter 21 System Commands	117
system-descript	117
system-time gmt	117
system-time manual	118
system-time dst	118
ip address	119
ip management-vlan	120
ip dhcp-alloc	120
ip bootp-alloc	120
reset	121
reboot	121
user-config backup	122
user-config load	122
user-config save	123
firmware upgrade	123
ping	123
tracert	124
loopback	125
show system-info	125
show ip address	126
show system-time	126
show system-time dst	126
show system-time source	127
show system-time mode	127
Chapter 22 Ethernet Configuration Commands	128
interface ethernet	128
interface range ethernet	128
description	129
shutdown	129
flow-control	130
negotiation	130
storm-control	131
port rate-limit	132
port rate-limit disable ingress	132
port rate-limit disable egress	133
show interface configuration	133
show interface status	134
show interface counters	134
show storm-control ethernet	135
show port rate-limit	135
Chapter 23 QoS Commands	136
qos	136
qos dot1p enable	136
qos dot1p config	137
qos dscp enable	138
qos dscp config	138
qos scheduler	139
show qos port-based	140
show qos dot1p	141
show qos dscp	141
show qos scheduler	141
Chapter 24 Port Mirror Commands	143
mirror add	143
mirror remove mirrored	144
mirror remove group	144
show mirror	145
Chapter 25 Port isolation Commands	146
port isolation	146
show port isolation	146
Chapter 26 ACL Commands	148
acl time-segment	148
acl edit time-segment	149
acl holiday	150
acl create	150
acl rule mac-acl	151
acl edit rule mac-acl	152
acl rule std-acl	153
acl edit rule std-acl	154
acl policy policy-add	155
acl policy action-add	156
acl edit action	157
acl bind to-port	157
acl bind to-vlan	158
show acl time-segment	158
show acl holiday	159
show acl config	159
show acl bind	160
Chapter 27 MSTP Commands	161
spanning-tree global	161
spanning-tree common-config	162
spanning-tree region	163
spanning-tree msti	164
spanning-tree msti	165
spanning-tree tc-defend	166
spanning-tree security	166
spanning-tree mcheck	167
show spanning-tree global-info	168
show spanning-tree global-config	168
show spanning-tree port-config	168
show spanning-tree region	169
show spanning-tree msti config	169
show spanning-tree msti port	170
show spanning-tree security tc-defend	170
show spanning-tree security port-defend	171
Chapter 28 IGMP Commands	172
igmp-snooping global	172
igmp-snooping config	172
igmp-snooping vlan-config-add	173
igmp-snooping vlan-config	174
igmp-snooping multi-vlan-config	175
igmp-snooping static-entry-add	176
igmp-snooping filter-add	177
igmp-snooping filter-config	177
igmp-snooping filter	178
show igmp-snooping global-config	179
show igmp-snooping port-config	179
show igmp-snooping vlan-config	180
show igmp-snooping multi-vlan	180
show igmp-snooping multi-ip-list	181
show igmp-snooping filter-ip-addr	181
show igmp-snooping port-filter	181
show igmp-snooping packet-stat	182
show igmp-snooping packet-stat-clear	182
Chapter 29 SNMP Commands	183
snmp global	183
snmp view-add	184
snmp group-add	184
snmp user-add	186
snmp community-add	187
snmp notify-add	188
snmp-rmon history sample-cfg	189
snmp-rmon history owner	190
snmp-rmon history enable	190
snmp-rmon event user	191
snmp-rmon event description	191
snmp-rmon event type	192
snmp-rmon event owner	193
snmp-rmon event enable	193
snmp-rmon alarm config	194
snmp-rmon alarm owner	195
snmp-rmon alarm enable	196
show snmp global-config	196
show snmp view	197
show snmp group	197
show snmp user	197
show snmp community	198
show snmp destination-host	198
show snmp-rmon history	198
show snmp-rmon event	199
show snmp-rmon alarm	199
Chapter 30 Cluster Commands	201
cluster ndp	201
cluster ntdp	202
cluster explore	203
cluster	203
cluster create	204
cluster manage config	204
cluster manage member	205
cluster manage role-change	205
show cluster ndp global	206
show cluster ndp port-status	206
show cluster neighbour	207
show cluster ntdp global	207
show cluster ntdp port-status	208
show cluster ntdp device	208
show cluster manage config	208
show cluster manage member	209
show cluster manage role	209
Chapter 31 LLDP Commands	210
lldp enable	210
lldp hold-multiplier	210
lldp timer	211
lldp admin-status	212
lldp snmp-trap	213
lldp tlv-select	213
show lldp global	214
show lldp interface	214
show lldp local-information	215
show lldp neighbor-information	215