Ingress-Acl Extend Rule Type-Ip - Zte ZXR10 2900E Series Command Reference Manual

ZXR10 2900E Series Command Reference

4.13.14 ingress-acl extend rule type-ip

Purpose
This command sets the rule that the extended ingress ACL is used to match IP messages.
Command Mode
Extended ingress ACL configuration mode
Syntax
rule <1-500>{permit | deny} ip {<source-ipaddr><sip-mask>| any}{<destination-ipaddr><dip-m
ask>| any}[dscp <0-63>][fragment]
Parameter Description
Parameter
<1-500>
permit
deny
ip
<source-ipaddr>
<sip-mask>
any (first)
<destination-ipaddr>
<dip-mask>
any (second)
dscp <0-63>
fragment
SJ-20130731155059-003|2013-11-27 (R1.0)
Description
Rule number.
If the condition matches, access is permitted.
If the condition matches, access is denied.
This rule only matches IP message. Non-IP message ignores
this rule.
IP address of the source network or host transmitting packets. It is
a 32-bit IP address expressed in dotted decimal notation.
Source mask used for sources. It is a 32-bit IP address expressed
in dotted decimal notation.
The any keyword is used as the abbreviation of the source 0.0.0.0
and the source mask 0.0.0.0.
Destination network or host of the transmitted packet. It is a 32-bit
IP address expressed in dotted decimal notation.
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0
This rule is only valid for messages with the specified DSCP value.
Ignore this rule for other messages. The range of DSCP is 0 to 63.
This rule is only valid for fragment messages. Non–fragment
messages ignore this rule.
4-222
ZTE Proprietary and Confidential