Table of Contents
Advertisement
Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
Step
5
6
Command
Raisecom(config-acl-ip-ext)# rule
rule-id
[
] { deny | permit } { tcp |
udp } {
source-ip-address source-ip-
mask
source-port
| any } [
minimum source port maximum source
port
destination-ip-address
] {
destination-ip-mask
[
destination-port
value
dscp-value
] [ dscp
fin-value
] [ fragment ] [ precedence
precedence-value
] [ psh
minimum source port maximum
[ range
source port
] [ rst
syn-value
] [ tos
urg-value
] [ ttl
time-range-name
range
Raisecom(config-acl-mac)#rule [
id
] { deny | permit } {
address source-mac-mask
destination-mac-address
{
destination-mac-mask
[ ethertype {
ethertype
mask
] | ip | arp } ] [ svlan
svlanid
cos-value
] [ cos
cvlanid
] [ inner-cos
time-range-name
[ time-range
Raisecom(config-acl-udf)#rule [
id
] { deny | permit } { ipv4 |
layer2 | l2-head } [
rule-mask offset
] [ second
string rule-mask offset
rule-string rule-mask offset
[ time-range
time-range-name
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
] [ range
| any }
] [ ack
ack-
] [ fin
psh-valu
e ]
rst-value
] [ syn
tos-value
] [ urg
ttl-value
] [ time-
]
rule-
source-mac-
| any }
| any }
[
ethertype-
] [ cvlan
inner-cos
]
]
rule-
rule-string
rule-
] [ third
]
]
Description
(Optional) configure the
matching rule for MAC ACL.
(Optional) configure the
matching rule for User ACL.
10 Security
400
Advertisement
Table of Contents
