SMC Networks 8028L2 - annexe 1 Management Manual page 324

| ACL Commands
C 23
HAPTER
udp - One of the following UDP parameters:
sip - Source IP address (a.b.c.d/n) or any.
dip - Destination IP address (a.b.c.d/n) or any.
sport - Source UDP port/range (0-65535) or any.
dport - Destination UDP port/range (0-65535) or any.
ip-flags - One of the IP flags listed under the ip parameter.
tcp - One of the following TCP parameters:
sip - Source IP address (a.b.c.d/n) or any.
dip - Destination IP address (a.b.c.d/n) or any.
sport - Source TCP port/range (0-65535) or any.
dport - Destination TCP port/range (0-65535) or any.
ip-flags - One of the IP flags listed under the ip parameter.
tcp-flags - One of the following TCP flags:
fin - TCP frames with any value in the FIN field.
syn - TCP frames with any value in the SYN field.
rst - TCP frames with any value in the RST field.
psh - TCP frames with any value in the PSH field.
ack - TCP frames with any value in the ACK field.
urg [0 | 1 | any] - Specifies the TCP "Urgent Pointer field
significant" (URG) value for this rule. (Options: 0 - TCP
frames where the URG field is set must not match this entry,
1 - TCP frames where the URG field is set must match this
entry, any - any value is allowed; Default: any)
permit - Permits a frame which matches this ACE. (This is the
default.)
deny - Drops a frame which matches this ACE.
rate-limiter - Specifies a rate limiter (see the
page 321) to apply to the specified ports. (Range: 1-15 or disable;
Default: Disabled)
port-copy - Defines a port to which matching frames are copied.
(Range: 1-28, or disable; Default: Disabled)
logging - Enables logging of matching frames to the system log.
(Options: log or log_disable; Default: Disabled)
shutdown - Shuts down an ingress port when a matching frame is
seen. (Options: shut or shut_disable; Default: Disabled)
D S
EFAULT ETTING
See defaults in Syntax section.
– 324 –
acl rate command,