Access-List Extended - TP-Link JetStream T3700G-52TQ Cli Reference Manual

T3700G-52TQ JetStream 52-Port Gigabit Stackable L3 Managed Switch CLI Guide
redirect-port
matching the corresponding ACL will be forwarded to the specific port. By
default, it is All Ports.
Command Mode
Global Configuration Mode
Example
Create a Standard-IP ACL whose ID is 12, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the
packets match this rule will be forwarded by the switch:
T3700G-52TQ(config)#access-list create 12
T3700G-52TQ(config)#access-list
192.168.0.100 smask 255.255.255.0 tseg tSeg1

29.7 access-list extended

Description
The access-list extended command is used to add Extended-IP ACL rule. To
delete the corresponding rule, please use no access-list extended
command.
Syntax
access-list extended
source-ip-mask
time-segment
[protocol
rate-limit
[ s-mirror interface { gigabitEthernet
mirror-port
ten-gigabitEthernet
no access-list extended
Parameter
acl-id
rule-id
permit ——The operation to forward packets. It is the default value.
deny —— The operation to discard packets.
—— The Destination Port of Redirect. The data packets
acl-id
destination-ip
] [dip
dscp
] [dscp ] [s-port
protocol tos
] [ tos
value
] [ qos-remark
} | redirect interface { gigabitEthernet
redirect-port
acl-id
——The desired Extended-IP ACL for configuration.
—— The rule ID.
standard 12
rule rule-id { permit | deny } [sip
destination-ip-mask
dmask
s-port
] [d-port
pre
] [pre ] [ frag { enable
icmptype
] [ icmptype
mirror-port
}]
rule-id
rule
226
rule 10 permit
source-ip
smask
] [tseg
d-port tcpflag
] [tcpflag
|
disable } ] [ s-condition
icmptcode
] [ icmpcode
| ten-gigabitEthernet
redirect-port
|
sip
]
]