Qtech QSW-8200-52T-AC [21/114] Mac ip access extended

User Manual

Chapter 1. Commands for ACL 21

www.qtech.ru

 Default Configuration: No access-lists configured.

 Usage Guide: After assigning this command for the first time, only an empty name access-list is

created and no list item included.

 Examples: Create an MAC ACL named mac_acl.

 Switch(config)# mac-access-list extended mac_acl

 Switch(Config-Mac-Ext-Nacl-mac_acl)#

1.20 mac-ip access extended

 Command: mac-ip-access-list extended <name>

 no mac-ip-access-list extended <name>

 Functions: Define a name-manner MAC-IP ACL or enter access-list configuration mode,

“no mac-ip-access-list extended <name>” command deletes this ACL.

 Parameters: <name>: name of access-list excluding blank or quotation mark, and it

must start with letter, and the length cannot exceed 32 (remark: sensitivity on capital

or small letter).

 Command Mode: Global Mode.

 Default: No named MAC-IP access-list.

 Usage Guide: After assigning this command for the first time, only an empty name access-list is

created and no list item included.

 Examples: Create an MAC-IP ACL named macip_acl.

 Switch(config)# mac-ip-access-list extended macip_acl

 Switch(Config-MacIp-Ext-Nacl-macip_acl)#

1.21 permit | deny (ip extended)

 Command: [no] {deny | permit} icmp {{<sIpAddr> <sMask>} | any-source | {host-

source <sIpAddr>}} {{<dIpAddr> <dMask>} | any-destination | {host-destination

<dIpAddr>}} [<icmp-type> [<icmp-code>]] [precedence <prec>] [tos <tos>][time-

range<time-range-name>]

o [no] {deny | permit} igmp {{<sIpAddr> <sMask>} | any-source | {host-source

<sIpAddr>}} {{<dIpAddr> <dMask>} | any-destination | {host-destination

<dIpAddr>}} [<igmp-type>] [precedence <prec>] [tos <tos>][time-range<time-

range-name>]

o [no] {deny | permit} tcp {{ <sIpAddr> <sMask> } | any-source | {host-source

<sIpAddr> }} [s-port { <sPort> | range <sPortMin> <sPortMax> }] {{ <dIpAddr>

<dMask> } | any-destination | {host-destination <dIpAddr> }} [d-port { <dPort>

| range <dPortMin> <dPortMax> }] [ack+fin+psh+rst+urg+syn] [precedence

<prec> ] [tos <tos> ][time-range <time-range-name> ]