TP-Link TL-SL5428E User Guide - Page 155

acl policy policy-add, Parameter, Command Mode, Example, Description

Get TP-Link TL-SL5428E PDF manuals and user guides
UPC - 845973020873
View all TP-Link TL-SL5428E manuals
Add to My Manuals
Save this manual to your list of manuals

Page 155 highlights

TL-SL5428E 24-port 10/100Mbps + 4-port Gigabit L2 Managed Switch CLI Guide time-segment] [frag { disable | enable }] no acl rule std-acl {acl-id} {rule-id} Parameter acl-id -- The desired Standard-IP ACL for configuration. rule-id -- The rule ID. op -- The operation for the switch to process packets which match the rules. There are two options, discard and permit. Discard means discarding packets, and permit means forwarding packets. By default, the option is permit. source-ip -- The source IP address contained in the rule. source-ip-mask -- The source IP address mask. It is required if you typed the source IP address. destination-ip -- The destination IP address contained in the rule. destination-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. time-segment -- The time-range for the rule to take effect. By default, it is not limited. frag -- Enable/Disable Fragment. By default, it is disabled. If Fragment is enabled, this rule will process all the fragments and the last piece of fragment will be always forwarded. Command Mode Global Configuration Mode Example Create a Standard-IP ACL whose ID is 120, and add Rule 10 for it. In the rule, the source IP address is 192.168.0.100, the source IP address mask is 255.255.255.0, the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: TP-LINK(config)# acl create 120 TP-LINK(config)# acl rule std-acl 120 10 op permit dip 192.168.0.100 dmask 255.255.255.0 tseg tSeg1 acl policy policy-add Description The acl policy policy-add command is used to add Policy. To delete the 143

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
TL-SL5428E
24-port 10/100Mbps + 4-port Gigabit L2 Managed Switch CLI Guide
143
time-segment
] [
frag
{ disable | enable }]
no acl rule std-acl
{
acl-id
} {
rule-id
}
Parameter
acl-id
——
The desired Standard-IP ACL for configuration.
rule-id
——
The rule ID.
op
——
The operation for the switch to process packets which match the rules.
There are two options, discard and permit. Discard means discarding packets,
and permit means forwarding packets. By default, the option is permit.
source-ip
——
The source IP address contained in the rule.
source-ip-mask
——
The source IP address mask. It is required if you typed
the source IP address.
destination-ip
——
The destination IP address contained in the rule.
destination-ip-mask
——
The destination IP address mask. It is required if you
typed the destination IP address.
time-segment
——
The time-range for the rule to take effect. By default, it is
not limited.
frag
——
Enable/Disable Fragment. By default, it is disabled. If Fragment is
enabled, this rule will process all the fragments and the last piece of fragment
will be always forwarded.
Command Mode
Global Configuration Mode
Example
Create a Standard-IP ACL whose ID is 120, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the
packets match this rule will be forwarded by the switch:
TP-LINK(config)# acl create
120
TP-LINK(config)# acl rule std-acl
120 10
op
permit
dip
192.168.0.100
dmask
255.255.255.0
tseg
tSeg1
acl policy policy-add
Description
The
acl policy policy-add
command is used to add Policy. To delete the