Ingress-Acl Link Rule Type-Arp - Zte ZXR10 2900E Series Command Reference Manual

Easy-maintenance secure switch
Hide thumbs Also See for ZXR10 2900E Series:
Table of Contents

Advertisement

ZXR10 2900E Series Command Reference
Command Mode
Layer 2 ingress ACL configuration mode
Syntax
rule <1-500>{permit | deny} ip {[cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-ma
sk>| any][<dest-mac><dmac-mask>| any]}
Parameter Description
Parameter
<1-500>
permit
deny
ip
cos <0-7>
<vlan-id>
<vlan-mask>
<source-mac>
<smac-mask>
any (first)
<dest-mac>
<dmac-mask>
any (second)
Guidelines
The IP rule can match IPv4 packets with cos fields, VLAN fields, specified source MAC,
any source MAC, specified destination MAC, or any destination MAC.

4.13.21 ingress-acl link rule type-arp

Purpose
This command sets the rule that the layer–2 ingress ACL matches ARP packets.
SJ-20130731155059-003|2013-11-27 (R1.0)
Description
Rule number.
If the condition matches, access is permitted.
If the condition matches, access is denied.
This rule is only valid for IP packet. Non-IP packet ignores this
rule.
This rule is only valid for the cos-specified message. Ignore this
rule for other messages. The range of cos is 0 to 7.
This rule is only valid for messages with the specified VLAN ID.
Ignore this rule for other messages. The rule of VLAN ID is 1
to 4094.
Optional VLAN mask. The default value is 0xfff.
Source MAC address of the transmitted packet.
Source MAC mask.
The any keyword is used as the abbreviation of the source MAC
address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00.
Destination MAC address of the transmitted packet.
Destination MAC mask.
The any keyword is used as the abbreviation of the destination
MAC address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00.
4-228
ZTE Proprietary and Confidential

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents