D-Link DWS-1008 Cli Reference Manual page 277

DWS-1008 CLI Reference Guide
Syntax: By IP packets
set security acl ip acl-name {permit [cos cos] | deny} ip {source-ip-addr mask
destination-ip-addr mask} [precedence precedence][tos tos] [before editbuffer-index |
modify editbuffer-index] [hits]
Syntax: By ICMP packets
set security acl ip acl-name {permit [cos cos] | deny}
icmp {source-ip-addr mask destination-ip-addr mask}
[type icmp-type][code icmp-code]
[precedence precedence][tos tos]
[before editbuffer-index | modify editbuffer-index] [hits]
Syntax: By TCP packets
set security acl ip acl-name {permit [cos cos] | deny} tcp {source-ip-addr mask [operator
port [port2]] destination-ip-addr mask [operator port [port2]]} [precedence precedence][tos
tos] [established] [before editbuffer-index | modify editbuffer-index] [hits]
Syntax: By UDP packets
set security acl ip acl-name {permit [cos cos] | deny} udp {source-ip-addr mask [operator
port [port2]] destination-ip-addr mask [operator port [port2]]} [precedence precedence][tos
tos] [before editbuffer-index | modify editbuffer-index] [hits]
acl-name
permit
cos cos
D-Link Systems, Inc.
Security ACL name. ACL names must be unique within the
switch, must start with a letter, and are case-insensitive. Specify an
ACL name of up to 32 of the following characters:
• Letters a through z and A through Z
• Numbers 0 through 9
• Hyphen (-), underscore (_), and period (.)
D-Link recommends that you do not use the same name with
different capitalizations for ACLs. For example, do not configure two
separate ACLs with the names acl_123 and ACL_123.
Note: In an ACL name, do not include the term all, default-action,
map, help, or editbuffer.
Allows traffic that matches the conditions in the ACE.
For permitted packets, a class-of-service (CoS) level for packet
handling. Specify a value from 0 through 7:
• 1 or 2 - Background. Packets are queued in DWL-8220AP forwarding
queue 4.
• 0 or 3 - Best effort. Packets are queued in DWL-8220AP forwarding
queue 3.
Security ACL Commands
276