Non-Ipv4 Acl Commands - Interlogix GE-DS Series User Manual

Syntax:
acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255> A.B.C.D A.B.C.D A.B.C.D A.B.C.D (check|unCheck)
<0-65535> <0-10>
Parameters:
(add|edit) specifies the operation.
<1-220> specifies the group id.
(permit|deny) specifies the action. permit: permit packet cross switch; deny: drop packet.
<0-4094> specifies the VLAN id. 0 means don't care.
<0-255> specifies the IP protocol. 0 means don't care.
A.B.C.D specifies the Source IP address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means compare all.
A.B.C.D specifies the Destination IP Address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means compare all.
(check|unCheck) specifies the IP Fragment. check: Check IP fragment field; unCheck: Not check IP fragment field.
<0-65535> specifies the Destination port number if TCP or UDP. 0 means don't care.
<0-10> specifies the Port id. 0 means don't care.
e.g.
Switch(config)# acl add 1 deny 1 ipv4 0 192.168.1.1 255.255.255.255 0.0.0.0 0.0.0.0 unCheck 0 0
This ACL rule will drop all packet from IP is 192.168.1.1 with VLAN id=1 and IPv4.
acl (add|edit) <1-220> (qosvoip) <0-4094>
Description:
Add or edit ACL group for Ipv4.
Syntax:
acl (add|edit) <1-220> (qosvoip) <0-4094> <0-7> <0-1F> <0-1F> <0-FF> <0-FF> <0-FFFF> <0-FFFF> <0-FFFF>
<0-FFFF>
Parameters:
(add|edit) specifies the operation.
<1-220> specifies the group id.
(qosvoip) specifies the action, do qos voip packet adjustment.
<0-4094> specifies the VLAN id. 0 means don't care.
<0-1F> specifies the port ID value.
<0-1F> specifies the port ID mask.
<0-FF> specifies the protocol value.
<0-FF> specifies the protocol mask.
<0-FFFF> specifies the source port value.
<0-FFFF> specifies the source port mask.
<0-FFFF> specifies the destination port value.
<0-FFFF> specifies the destination mask.
e.g. acl add 1 qosvoip 1 7 1 1 0 0 0 0 0 0

Non-Ipv4 ACL commands

no acl <1-220> and show acl [<1-220>] commands are same as Ipv4 ACL commands.
acl (add|edit) <1-220> (permit|deny) <0-4094> nonipv4 <0-65535>
Description:
Add or edit ACL group for non-Ipv4.
Syntax:
acl (add|edit) <1-220> (permit|deny) <0-4094> nonipv4 <0-65535>
Parameters:
(add|edit) specifies the operation.
<1-220> specifies the group id.
(permit|deny) specifies the action. permit: permit packet cross switch; deny: drop packet.
<0-4094> specifies the VLAN id. 0 means don't care.
<0-65535> specifies the Ether Type. 0 means don't care.
e.g. acl add 1 deny 0 nonipv4 2054. This ACL rule will drop all packets for ether type is 0x0806 and non-IPv4.
GE-DS-82 and NS2503-8P/2C Series User Manual
173