Ruijie Networks RG-S2600E Series Cli Reference Manual page 880

S2600E CLI Reference Guide
ID
flow-label
dst
dst-wildcard
fragment
precedence
range
time-range
tm-rng-name
tos
cos
cos inner cos
icmp-type
icmp-code
icmp-message
operator port[port]
src-mac-addr
dst-mac-addr
VID vid
VID inner vid
ethernet-type
match-all tcpf
text
in
out
{rule mask offset}
The fields in the packet are as follows:
AA AA AA AA AA AA BB BB BB BB BB BB CC CC DD DD
DD DD EE FF GG HH HH HH II II JJ KK LL LL MM MM
NN NN OO PP QQ QQ RR RR RR RR SS SS SS SS TT TT
Chapter 1 ACL Configuration Commands
Meaning
Flow label in the range 0 to 1048575
Packet destination IP address (host address or network address)
Destination IP address wildcard. It can be discontinuous, such as
0.255.0.32
Packet fragment filtering.
Packet precedence value (0 to 7)
The layer 4 port number range of the packet.
Time range of packet filtering, named tm-rng-name
Type of service (0 to 15)
Class of service (0-7)
COS of the packet tag
ICMP message type (0 to 255)
ICMP message type code (0 to 255)
ICMP message type name (0 to 255)
Operator (lt-smaller,
range-range)
port indicates the port number. Dyadic operation needs two port
numbers, while other operators only need one port number
Physical address of the source host
Physical address of the destination host
VLAN ID
VID of the tag
Ethernet protocol type. 0x value can be entered.
Match all bits of the TCP flag.
Remark text
Filter the incoming packets of the interface
Filter the outgoing packets of the interface
rule: Hexadecimal value field; mask: Hexadecimal mask field
+
offset: Refer to the offset table
"+" sign indicates at least one group
eq-equal, gt-greater, neq-unequal,