D-Link DXS-1210-12TC Reference Manual page 47

tos TOS
dscp DSCP
lt PORT
gt PORT
eq PORT
neq PORT
range MIN-PORT MAX-PORT
TCP-FLAG
fragments
time-range PROFILE-NAME
ICMP-TYPE
ICMP-CODE
ICMP-MESSAGE
Default
None.
Command Mode
Extended Expert Access-list Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
If a rule entry is created without a sequence number, a sequence number will be automatically
assigned. If it is the first entry, the sequence number 10 is assigned. A subsequent rule entry will be
assigned a sequence number that is 10 greater than the largest sequence number in that access list
and is placed at the end of the list.
The user can use the command access-list sequence to change the start sequence number and
increment number for the specified access list. After the command is applied, the new rule without
specified sequence number will be assigned sequence based new sequence setting of the specified
access list.
When you manually assign the sequence number, it is better to have a reserved interval for future
lower sequence number entries. Otherwise, it will create extra effort to insert an entry with a lower
sequence number.
DXS-1210 Series Smart Managed Switch CLI Reference Guide
(Optional) Specifies that packets can be filtered by type of service
level, as specified by a number from 0 to 15.
(Optional) Specifies the matching DSCP code in IP header. The range
is from 0 to 63, or select the following DSCP name: af11 - 001010,
af12 -001100, af13 - 001110, af21 - 010010, af22 - 010100, af23 -
010110, af31 - 011010, af32 - 011100, af33 - 011110, af41 - 100010,
af42 - 100100, af43 - 100110, cs1 - 001000, cs2 - 010000, cs3 -
011000, cs4 - 100000, cs5 - 101000, cs6 - 110000, cs7 - 111000,
default - 000000, ef – 101110.
(Optional) Specifies to match if less than the specified port number.
(Optional) Specifies to match if greater than the specified port number.
(Optional) Specifies to match if equal to the specified port number.
(Optional) Specifies to match if not equal to the specified port number.
(Optional) Specifies to match if fall within the range of ports.
(Optional) Specifies the TCP flag fields and the specified TCP header
bits calledack (acknowledge), fin (finish), psh (push), rst (reset), syn
(synchronize), or urg (urgent).
(Optional)Specifies the packet fragment's filtering.
(Optional) Specifies the name of timeperiod profile associated with the
accesslist delineating its activation period.
(Optional) Specifies the ICMP message type. The valid number for the
message type is from 0 to 255.
(Optional) Specifies the ICMP message code. The valid number for the
message code is from 0 to 255.
(Optional) Specifies the ICMP message. The following pre-defined
parameters are available for selection: beyond-scope, destination-
unreachable, echo-reply, echo-request, header, hop-limit, mld-query,
mld-reduction, mld-report, nd-na, nd-ns, next-header, no-admin, no-
route, packet-too-big, parameter-option, parameter-problem, port-
unreachable, reassembly-timeout, redirect, renum-command, renum-
result, renum-seq-number, router-advertisement, router-renumbering,
router-solicitation, time-exceeded, unreachable.
44