NETGEAR XSM7224S - ProSafe 10 Gigabit Stackable Manual page 313

ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
IP Extended ACL:
Format
access-list <100-199> {deny | permit} {every | {{icmp | igmp | ip |
tcp | udp | <number>} <srcip> <srcmask>[{eq {<portkey> | <0-65535>}
<dstip> <dstmask> [{eq {<portkey>| <0-65535>}] [precedence
<precedence> | tos <tos> <tosmask> | dscp <dscp>] [log] [assign-queue
<queue-id>] [{mirror | redirect} <unit/slot/port>]
Mode Global Config
Parameter
<1-99> or <100-199>
{deny | permit}
every
{icmp | igmp | ip | tcp | udp
| <number>}
<srcip> <srcmask>
[{eq {<portkey> |
<0-65535>}]
<dstip> <dstmask>
[precedence <precedence> |
tos <tos> <tosmask> | dscp
<dscp>]
[log]
[assign-queue <queue-id>]
[{mirror | redirect} <unit/
slot/port>]
Quality of Service (QoS) Commands
Description
Range 1 to 99 is the access list number for an IP standard ACL.
Range 100 to 199 is the access list number for an IP extended ACL.
Specifies whether the IP ACL rule permits or denies an action.
Match every packet
Specifies the protocol to filter for an extended IP ACL rule.
Specifies a source IP address and source netmask for match
condition of the IP ACL rule.
Specifies the source layer 4 port match condition for the IP ACL rule.
You can use the port number, which ranges from 0-65535, or you
specify the <portkey>, which can be one of the following keywords:
domain, echo, ftp, ftpdata, http, smtp, snmp,
telnet, tftp, and www. Each of these keywords translates into its
equivalent port number, which is used as both the start and end of a
port range.
Specifies a destination IP address and netmask for match condition
of the IP ACL rule.
Specifies the TOS for an IP ACL rule depending on a match of
precedence or DSCP values using the parameters dscp,
precedence, tos/tosmask.
Specifies that this rule is to be logged.
Specifies the assign-queue, which is the queue identifier to which
packets matching this rule are assigned.
Specifies the mirror or redirect interface which is the unit/slot/port to
which packets matching this rule are copied or forwarded,
respectively.
v1.0, November 2010
5-39