Qtech QSW-2910-09T-POE-AC/DC [90/212] Define acl

+7(495) 797-3311 www.qtech.ru

Москва, Новозаводская ул., 18, стр. 1

range.

6.2.3 Define ACL

Switch supports many ACL. Followings are how to define it:

 Define standard ACL

Switch can defaine at most 99 standard ACL with the number ID (the number is in the range of

1 to 99), at most 1000 standard ACL with the name ID and totally 3000 sub-rules. It can define

128 sub-rules for an ACL (this rule can suit both ACL with name ID and number ID). Standard

ACL only classifies data packet according to the source IP information of IP head of data

packet and analyse the matching data packet. The construction of IP head refers to RFC791.

1. Define standard ACL based on number ID

Standard ACL based on number ID is using number to be ID of standard ACL. Use following

command to define standard ACL based on number ID.

(1) Configure it in global configuration mode.

Command:

access-list access-list-number { deny | permit } { source-addr source-wildcard | any }

[ fragments ] [ time-range time-range-name ]

(2) Define the matching order of ACL:

access-list access-list-number match-order { config | auto }

(3) Delete all the subitems or one subitem in one ACL with number ID or name ID or all

ACLs.

no access-list { all | { access-list-number | name access-list-name } [ subitem ] }

Use access-list command repeatedly to define more rules for the same ACL.

If parameter time-range is not used, this ACL will be effective at any time after activation.

Concrete parameter meaning refers to corresponded command line.

2. Define standard ACL with name ID.

Standard ACL with name ID is using name ID to identify standard ACL.

Instruction:

Defining standard ACL with name ID should enter specified configuration mode: use access-

list standard in global configuration mode which can specify matching order of ACL. Use exit

command to be back from this mode.

Use following commands to define standard ACL with name ID. Configure it incorresponded

mode.

Command: