D-Link DXS-3600-16S Manual page 28

destination
destination-wildcard
host destination
operator
port
precedence precedence
tos tos
fragments
time-range time-range-
name
tcp-flag
icmp-type
icmp-code
icmp-message
Default
Command Mode
Command Default Level
Usage Guideline
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
Specifies the destination IP address.
Applies wildcard bits to the destination.
Specifies a specific destination IP address.
(Optional) Possible operators include 'eq' (equal), 'gt' (greater than), 'lt' (less than),
'neq' (not equal), and 'range' (inclusive range). A range needs two port numbers,
while other operators only need one port number.
Specifies the Layer 4 port number as a decimal number (from 0 to 65535) or the
name of a Layer 4 port.
TCP ports used:
'bgp', 'chargen', 'daytime', 'discard', 'domain', 'echo', 'rexec', 'finger', 'ftp', 'ftp-data',
'gopher', 'hostname', 'ident', 'irc', 'klogin', 'kshell', 'login', 'lpd', 'nntp', 'snpp',
'pop2', 'pop3', 'smtp', 'sunrpc', 'shell', 'tacacs', 'telnet', 'time', 'uucp', 'whois',
'http'.
UDP ports used:
'biff', 'bootpc', 'bootps', 'discard', 'irc', 'domain', 'echo', 'isakmp', 'mobile-ip',
'nameserver', 'netbios-dgm', 'netbios-ns', 'netbios-ss', 'nat-t', 'ntp', 'snpp', 'rip',
'snmp', 'snmptrap', 'sunrpc', 'syslog', 'tacacs', 'talk', 'tftp', 'time', 'who', 'xdmcp'.
(Optional) Packets can be filtered by precedence level, as specified by a number
from 0 to 7 or by name: routine (0), priority (1), immediate (2), flash (3), flash-
override (4), critical (5), internet (6), network (7).
(Optional) Packets can be filtered by type of service level, as specified by a number
from 0 to 15 or by name: normal (0) , min-monetary-cost(1), max-reliability (2), max-
throughput (4), min-delay (8).
(Optional) Packet fragment filtering.
(Optional) Specifies the name of time-period profile associated with the access-list
delineating its activation period.
(Optional) Specifies the TCP flag fields. The specified TCP header bits are: ack
(acknowledge), fin (finish), psh (push), rst (reset), syn (synchronize), or urg (urgent).
(Optional) Specifies the ICMP message type. The valid number for the message type
is from 0 to 255.
(Optional) Specifies the ICMP message code. The valid number for the message
code is from 0 to 255
(Optional) Specifies the ICMP message type name or the ICMP message type and
code by name. Code names that can be used are 'administratively-prohibited',
'alternate-address', 'conversion-error', 'host-prohibited', 'net-prohibited', 'echo',
'echo-reply', 'pointer-indicates-error', 'host-isolated', 'host-precedence-violation',
'host-redirect', 'host-tos-redirect', 'host-tos-unreachable', 'host-unknown', 'host-
unreachable', 'information-reply', 'information-request', 'mask-reply', 'mask-request',
'mobile-redirect', 'net-redirect', 'net-tos-redirect', 'net-tos-unreachable', 'net-
unreachable', 'net-unknown', 'bad-length', 'option-missing', 'packet-fragment',
'parameter-problem', 'port-unreachable', 'precedence-cutoff', 'protocol-unreachable',
'reassembly-timeout', 'redirect-message', 'router-advertisement', 'router-solicitation',
'source-quench', 'source-route-failed', 'time-exceeded', 'timestamp-reply',
'timestamp-request', 'traceroute', 'ttl-expired', 'unreachable'.
None.
Extended IP Access-list Configuration Mode.
Level: 12
A sequence number will be assigned automatically if the user did not assign it
manually. The automatic assign sequence number start from 10 and increases by 10
per new entry. The start sequence number and sequence increment of IP ACL can
be configured manually.
20