3Com 8807 Configuration Manual page 210

210 C 23: L
HAPTER OGON
U ACL C C
SER ONTROL ONFIGURATION
Table 181 Configuration tasks
Configuration procedure
Define rules
Exit ACL view
Enter user interface view
Apply ACLs to
restrict
inbound/outboun
d requests of
Telnet or SSH
users
By default, the system does not restrict incoming/outgoing requests.
Command
rule [ rule-id ] { permit |
deny } [ source {
source-addr wildcard | any
Basic ACL view
} | fragment | time-range
name | vpn-instance
instance-name ]*
rule [ rule-id ] { permit |
deny } protocol [ source {
source-addr wildcard | any
} ] [ destination {
dest-addr wildcard | any } ]
[ source-port operator
port1 [ port2 ] ] [
destination-port
Advanced ACL
operator port1 [ port2 ] ] [
view
icmp-type type code ] [
established ] [ [
precedence precedence |
tos tos ]* | dscp dscp ] [
fragment ] [bt-flag ]
[time-range name ] [
vpn-instance
instance-name ]
rule [ rule-id ] { permit |
deny } [ cos cos-value |
c-tag-cos c-cos-value |
exp exp-value |
protocol-type | mac-type {
any-broadcast-packet |
arp-broadcast-packet |
non-arp-broadcast-pack
et | { { unicast-packet |
multicast-packet } [
Layer 2 ACL view known | unknown ] } } |
ingress { { source-vlan-id [
to source-vlan-id-end ] |
source-mac-addr
source-mac-wildcard |
c-tag-vlan c-tag-vlanid }* |
any } | egress {
dest-mac-addr
dest-mac-wildcard | any } |
s-tag-vlan s-tag-vlanid |
time-range name ]*
quit
user-interface [ type ]
first-number
Apply basic or acl acl-number1 {
advanced ACLs inbound | outbound }
Apply Layer 2
acl acl-number2 inbound
ACLS
Description
When Telnet and SSH
users use basic and
advanced ACLs, only the
parameters source-addr
and the wildcard,
dest-addr and the wildcard
parameter, and the
time-range keyword in
the command are valid.
When Telnet and SSH
users use an Layer 2 ACL,
only the source-mac-addr
and the
source-mac-wildcard
parameter, and the
time-range keyword in
the command are valid.
-
-
The acl-number1
parameter indicates the
number of the basic or
advanced ACLs, in the
range of 2,000 to 3,999.
The acl-number2
parameter indicates the
number of the Layer 2
ACL, in the range of 4,000
to 4,999.