TP-Link T1600G-52TS User Manual page 716

Configuring ACL
Step 3 access-list ip acl-id-or-name rule {auto | rule-id } {deny | permit} logging {enable | disable}
[sip sip-address sip-mask sip-address-mask ] [ dip dip-address dip-mask dip-address-
mask ] [dscp dscp-value ] [tos tos-value ] [pre pre-value ] [protocol protocol [s-port s-port-
number s-port-mask s-port-mask ] [d-port d-port-number d-port-mask d-port-mask ] [tcpflag
tcpflag ]] [tseg time-range-name ]
Add rules to the ACL.
acl-id-or-name
auto:
rule-id
deny |
to discard; permit means to forward. By default, it is set to permit.
logging {enable |
selected, the times that the rule is matched will be logged every 5 minutes. With ACL Counter
trap enabled, a related trap will be generated if the matching times changes.
sip-address:
sip-address-mask:
address is entered.
dip-address:
dip-address-mask:
destination IP address is entered.
dscp-value:
tos-value:
pre-value:
protocol:
s-port-number:
s-port-mask:
hexadacimal numbers.
d-port-number:
number.
d-port-mask:
with 4 hexadacimal numbers.
tcpflag:
numbers or * (for example, 01*010*). The default is *, which indicates that the flag will not be
matched.
The flags are URG (Urgent flag), ACK (Acknowledge Flag), PSH (Push Flag), RST (Reset Flag),
SYN (Synchronize Flag) and FIN (Finish Flag).
time-range-name:
Step 4 end
Return to privileged EXEC mode.
: Enter the ID or name of the ACL that you want to add a rule for.
The rule ID will be assigned automatically and the interval between rule IDs is 5.
: Assign an ID to the rule.
permit: Specify the action to be taken with the packets that match the rule. Deny means
disable}: Enable or disable Logging function for the ACL rule. If "enable" is
Enter the source IP address.
Enter the mask of the source IP address. This is required if a source IP
Enter the destination IP address.
Enter the mask of the destination IP address. This is required if a
Specify the DSCP value between 0 and 63.
Specify an IP ToS value to be matched between 0 and 15.
Specify an IP Precedence value to be matched between 0 and 7.
Specify a protocol number between 0 and 255.
With TCP or UDP configured as the protocol, specify the source port number.
With TCP or UDP configured as the protocol, specify the source port mask with 4
With TCP or UDP configured as the protocol, specify the destination port
With TCP or UDP configured as the protocol, specify the destination port mask
With TCP configured as the protocol, specify the flag value using either binary
The name of the time-range. The default is No Limit.
ACL Configuration
User Guide 691