Table of Contents
Advertisement
Chapter 6: Command Line Interface
acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255>
Description:
Add or edit ACL group for Ipv4.
Syntax:
acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255> A.B.C.D A.B.C.D
A.B.C.D A.B.C.D (check|unCheck) <0-65535> <0-26>
Parameters:
(add|edit) specifies the operation.
<1-220> specifies the group id.
(permit|deny) specifies the action. permit: permit packet cross switch; deny: drop
packet.
<0-4094> specifies the VLAN id. 0 means don't care.
<0-255> specifies the IP protocol. 0 means don't care.
A.B.C.D specifies the Source IP address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means
compare all.
A.B.C.D specifies the Destination IP Address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means
compare all.
(check|unCheck) specifies the IP Fragment. check: Check IP fragment field; unCheck:
Not check IP fragment field.
<0-65535> specifies the Destination port number if TCP or UDP. 0 means don't care.
<0-26> specifies the Port id. 0 means don't care.
e.g.
Switch(config)# acl add 1 deny 1 ipv4 0 192.168.1.1 255.255.255.255 0.0.0.0 0.0.0.0 unCheck 0 0
This ACL rule will drop all packet from IP is 192.168.1.1 with VLAN id=1 and IPv4.
196
GE-DS-82 and 82-PoE Ethernet Managed Switch User Manual
Advertisement
Table of Contents
