TP-Link T1600G-18TS Configuration Manual page 548

Configuring ACL
Step 3 access-list extended acl-id rule rule-id {deny | permit} [ [sip source-ip] smask source-ip-mask ] [
[dip destination-ip ] dmask destination-ip-mask ] [s-port s-port ] [d-port d-port ] [protocol protocol ]
Add a rule to the ACL.
acl-id:
rule-id:
existing Extend-IP ACL IDs
deny | permit
Deny means to discard; permit means to forward. By default, it is permit.
source-ip:
source-ip-mask:
is entered.
destination-ip:
destination-ip-mask:
destination IP address is entered.
s-port:
d-port:
protocol:
Step 4 show access-list [ access-list-num ]
(Optional) View the current ACL configuration.
access-list-num
Step 5 end
Return to privileged EXEC mode.
Step 6 copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to create Extend-IP ACL 1700 and configure Rule7 to
deny Telnet packets with source IP192.168.2.100:
Switch#configure
Switch(config)#access-list create 1700
Switch(config)#access-list extended 1700 Rule 7 deny sip 192.168.2.100 smask
255.255.255.255 protocol 6 d-port 23
Switch(config)#show access-list 1700
Extended IP access list 1700
Rule 7 deny sip 192.168.2.100 smask 255.255.255.255 protocol 6 d-port 23
Switch(config)#end
Switch#copy running-config startup-config
The ID number of the ACL you have created.
Specify the rule ID, which ranges from 0 to 1999. It should not be the same as any
Specify the operation to be performed with the packets that match the rule.
:
Enter the source IP address.
Enter the mask of the source IP address. This is required if a source IP address
Enter the destination IP address.
Enter the mask of the destination IP address. This is required if a
Enter the TCP/UDP source port if TCP/UDP protocol is selected.
Enter the TCP/UDP destination port if TCP/UDP protocol is selected.
Specify a protocol type.
: The ID number of the ACL.
ACL Configurations
Configuration Guide 525