Tp-Link T1700G-28TQ V2 — создание и управление расширенными IP ACL в сетевых устройствах [211/354]

Превью страниц Страница 211 / 354
Tp-Link T1700G-28TQ V2 [211/354] Parameter
Example
Create an Extended-IP ACL whose ID is 2220, and add Rule 10 for it. In the
rule, the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, and the packets match this rule will be forwarded by the
switch:
T1700G-28TQ(config)# access-list create 2220
T1700G-28TQ(config)# access-list extended 2220 rule 10 permit sip
192.168.0.100 smask 255.255.255.0
25.10 access-list ipv6
Description
The access-list ipv6 command is used to add IPv6 ACL rule. To delete the
corresponding rule, please use no access-list ipv6 command. Standard-IP
ACLs analyze and process data packets based on a series of match
conditions, which can be the source IP addresses and destination IP
addresses carried in the packets, the DSCP and flow-label value, etc.
Syntax
access-list ipv6
acl-id
rule
rule-id
{ deny
|
permit } [dscp
dscp-value
]
[flow-label
flow-label-value
] [ [ sip
source-ip
] sip-mask
source-ip-mask
]
[ [ dip
destination-ip
] dip-mask
destination-ip-mask
] [ s-port
s-port
] [ d-port
d-port
]
no access-list ipv6
acl-id
rule
rule-id
Parameter
acl-id
—— The desired Standard-IP ACL for configuration.
rule-id
—— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
dscp-value
—— Specify the dscp value, ranging from 0 to 63.
flow-label-value
—— The IPv6 flow label, which ranges from 0-0xfffff.
source-ip
—— The source IP address contained in the rule.
source-ip-mask
—— The source IP address mask. It is required if you typed
the source IP address.
destination-ip
—— The destination IP address contained in the rule.
195

Содержание

2312

Узнайте, как создать расширенный IP ACL, добавлять правила и управлять ими для эффективной обработки сетевых пакетов. Подробные инструкции и примеры.