NETGEAR ProSafe GSM7228PS Cli Manual page 314

IP Extended ACL:
Format
access-list <100-199> {deny | permit} {every | {{icmp | igmp | ip |
tcp | udp | <number>} <srcip> <srcmask>[{eq {<portkey> | <0-65535>}
<dstip> <dstmask> [{eq {<portkey>| <0-65535>}] [precedence
<precedence> | tos <tos> <tosmask> | dscp <dscp>] [log] [assign-queue
<queue-id>] [{mirror | redirect} <unit/slot/port>]
Mode Global Config
Parameter
<1-99> or <100-199>
{deny | permit}
every
{icmp | igmp | ip | tcp | udp
| <number>}
<srcip> <srcmask>
[{eq {<portkey> |
<0-65535>}]
<dstip> <dstmask>
[precedence <precedence> |
tos <tos> <tosmask> | dscp
<dscp>]
[log]
[assign-queue <queue-id>]
[{mirror | redirect} <unit/
slot/port>]
Quality of Service (QoS) Commands
ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
Description
Range 1 to 99 is the access list number for an IP standard ACL.
Range 100 to 199 is the access list number for an IP extended ACL.
Specifies whether the IP ACL rule permits or denies an action.
Match every packet
Specifies the protocol to filter for an extended IP ACL rule.
Specifies a source IP address and source netmask for match
condition of the IP ACL rule.
Specifies the source layer 4 port match condition for the IP ACL rule.
You can use the port number, which ranges from 0-65535, or you
specify the <portkey>, which can be one of the following keywords:
domain, echo, ftp, ftpdata, http, smtp, snmp,
telnet, tftp, and www. Each of these keywords translates into its
equivalent port number, which is used as both the start and end of a
port range.
Specifies a destination IP address and netmask for match condition
of the IP ACL rule.
Specifies the TOS for an IP ACL rule depending on a match of
precedence or DSCP values using the parameters dscp,
precedence, tos/tosmask.
Specifies that this rule is to be logged.
Specifies the assign-queue, which is the queue identifier to which
packets matching this rule are assigned.
Specifies the mirror or redirect interface which is the unit/slot/port to
which packets matching this rule are copied or forwarded,
respectively. The mirror and redirect parameters are not
available on the GSM7328Sv1 and GSM7352Sv1 platforms.
v1.0, May 2010
6-38