АМАТЕК AN-SGM28P24-400 Руководство по интерфейсу командной строки CLI онлайн [228/322] 598614

227 / 322

1)A.B.C.D wildcard You can control the IP address from a network segment；

2)any Amount to A.B.C.D 255.255.255.255

3)host A.B.C.D Amount to A.B.C.D 0.0.0.0

srcPort：For the case of protocol TCP or UDP, you can control the source port of the packet,

the input mode can be some familiar port service name, such as: www can also be digital, such as

80。

destination：Objective IP has three input modes：

1) A.B.C.D wildcard You can control the IP address from a network segment；

2) any Amount to A.B.C.D 255.255.255.255

3) host A.B.C.D Amount to A.B.C.D 0.0.0.0

destPort：For the case that protocol is TCP or UDP, the destination port of the packet can be

controlled, and the input mode is the same as that of srcPort。

tcp-flag：For the case that protocol is tcp. The TCP field matching of data packets can be

controlled, and the optional parameters are ACK, fin, PSH, RST, syn, urg。

IP MAC rule：The IP MAC group can control the source destination MAC address and the

source destination IP address of the IP packet。

Command form：access-list <groupid> {deny | permit} <src-mac> vid <vlan-id|any> ip

<src-ip> <dst-ip>

Parameter description：

groupId：The access control list number, the extended IP ACL support group from 700 to

799。

deny/permit：If the match is complete, the packet is rejected or allowed to be forwarded。

src-mac：source mac address。

The MAC address has three input modes：

1)HHHH.HHHH.HHHH wildcard You can control the MAC address from a segment；

2)any Amount to HHHH.HHHH.HHHH FFFF.FFFF.FFFF.

3)host A.B.C.D Amount to HHHH.HHHH.HHHH 0000.0000.0000

Vid：The outer vid can be either a vlan-id, or any any vlan-id

src-ip：Source IP address。

dst-ip：Destination IP address。

The IP address has three input modes：

1) A.B.C.D wildcard You can control the IP address from a network segment；

2) any Amount to A.B.C.D 255.255.255.255