Simplicity 3424 Specifications download pdf (Page 155)

143

255.255.255.0, the time-range for the rule to take effect is tSeg1, and the

packets match this rule will be forwarded by the switch:

TL-SG3424(config)# access-list create 120

TL-SG3424(config)# access-list standard 120 rule 10 permit sip

192.168.0.100 smask 255.255.255.0 tseg tSeg1

access-list extended

Description

The access-list extended command is used to add Extended-IP ACL rule. To

delete the corresponding rule, please use no access-list extended command.

Syntax

access-list extended acl-id rule rule-id [ deny | permit ] [[ sip source-ip ]

smask source-ip-mask ] [[ dip destination-ip] dmask destination-ip-mask ]

[ tseg time-segment ] [ dscp dscp ] [ s-port s-port ] [ d-port d-port ] [ tcpflag

tcpflag ] [ protocol protocol ] [ tos tos ] [ pri pri ]

no access-list extended acl-id rule rule-id

Parameter

acl-id——The desired Extended-IP ACL for configuration.

rule-id —— The rule ID.

deny —— The operation to discard packets.

permit ——The operation to forward packets. It is the default value.

source-ip —— The source IP address contained in the rule.

source-ip-mask —— The source IP address mask. It is required if you typed

the source IP address.

destination-ip —— The destination IP address contained in the rule.

destination-ip-mask —— The destination IP address mask. It is required if you

typed the destination IP address.

time-segment —— The time-range for the rule to take effect. By default, it is

not limited.

dscp —— Specify the dscp value, ranging from 0 to 63.

s-port —— The source port number.

d-port —— The destination port number.

tcpflag —— Specify the flag value when using TCP protocol.

protocol —— Configure the value of the matching protocol.

1 2 ... 150 151 152 153 154 155 156 157 158 159 160 ... 211 212

Simplicity 3424 Specifications Page 155