Zte ZXR10 2900E series Configuration Manual page 95

Command
zte(hybrid-acl-group)#
{<source-ipaddr><sip-mask>| any}{<destination-ipaddr><dip-mask>|
any}[dscp <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask
>]][<source-mac><smac-mask>| any][<dest-mac><dmac-mask>| any]
zte(hybrid-acl-group)#
{<source-ipaddr><sip-mask>| any}[source-port <0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port
<0-65535><dport-mask>][dscp <0-63>][fragment][cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>| any]
zte(hybrid-acl-group)#
{<source-ipaddr><sip-mask>| any}[source-port <0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port
<0-65535><dport-mask>][dscp <0-63>][fragment][cos
<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|
any][<dest-mac><dmac-mask>| any]
zte(hybrid-acl-group)#
{<sender-ipaddr><sip-mask>| any}{<target-ipaddr><tip-mask>|
any}[cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-m
ask>| any][<dest-mac><dmac-mask>| any]
zte(hybrid-acl-group)#
{[ether-type <1501-65535>][cos <0-7>][<vlan-id>[<vlan-mask
>]][<source-mac><smac-mask>| any][<dest-mac><dmac-mask>|
any]}
zte(hybrid-acl-group)#
ipv6 <ip-protocol>{<source-ipv6addr><sipv6-mask>|
any}[<destination-ipv6addr><dipv6-mask>| any][<vlan-id>]
zte(hybrid-acl-group)#
ipv6 tcp {<source-ipv6addr><sipv6-mask>| any}[source-port
<0-65535><sport-mask>][<destination-ipv6addr><dipv6-mask>|
any][dest-port <0-65535><dport-mask>][<vlan-id>]
zte(hybrid-acl-group)#
udp {<source-ipv6addr><sipv6-mask>| any}[source-port
<0-65535><sport-mask>][<destination-ipv6addr><dipv6-mask>|
any][dest-port <0-65535><dport-mask>][<vlan-id>]
zte(hybrid-acl-group)#
deny} ipv6 any {<source-ipv6addr><sipv6-mask>|
any}[<destination-ipv6addr><dipv6-mask>| any][<vlan-id>]
SJ-20130731155059-002|2013-11-27 (R1.0)
rule <1-500>{permit | deny} ip
rule <1-500>{permit | deny} tcp
rule <1-500>{permit | deny} udp
rule <1-500>{permit | deny} arp
rule <1-500>{permit | deny} any
rule <1-500>{permit | deny}
rule <1-500>{permit | deny}
rule <1-500>{permit | deny} ipv6
rule <1-500>{permit |
5-47
Chapter 5 Service Configuration
Function
Sets the rule that a hybrid ingress
ACL is used to match IPv4
packets.
Sets the rule that a hybrid ingress
ACL is used to match IPv4-TCP
packets.
Sets the rule that a hybrid ingress
ACL is used to match IPv4-UDP
packets.
Sets the rule that a hybrid ingress
ACL is used to match ARP
packets.
Sets the rule that a hybrid ingress
ACL is used to match non-IPv6
packets.
Sets the rule that a hybrid ingress
ACL is used to match specified
fields of IPv6 packets.
Sets the rule that a hybrid ingress
ACL is used to match IPv6-TCP
packets.
Sets the rule that a hybrid ingress
ACL is used to match IPv6-UDP
packets.
Sets the rule that a hybrid ingress
ACL is used to match IPv6
packets.
ZTE Proprietary and Confidential