D-Link DXS-3600 Series Reference Manual page 56

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Switch(config-access-map)# end
Switch# show vlan access-map
VLAN access-map vlan-map 20
match ip address:
action: forward
VLAN access-map vlan-map 30
match mac address:
action: forward
Switch#
4-17 permit | deny (expert access-list)
This command is used to add a permit or deny entry. Use the no command to remove an entry.
Extended Expert ACL:
[SEQUENCE-NUMBER] {permit | deny} PROTOCOL {SRC-IP-ADDR SRC-IP-WILDCARD | host
SRC-IP-ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any}
{DST-IP-ADDR DST-IP-WILDCARD | host DST-IP-ADDR | any} {DST-MAC-ADDR DST-MAC-
WILDCARD | host DST-MAC-ADDR | any} [cos OUTER-COS [inner INNER-COS]] [vlan OUTER-
VLAN [inner INNER-VLAN]] [fragments] [[precedence PRECEDENCE] [tos TOS] | dscp DSCP]
[time-range PROFILE-NAME]
[SEQUENCE-NUMBER] {permit | deny} tcp {SRC-IP-ADDR SRC-IP-WILDCARD | host SRC-IP-
ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any} [{eq | lt | gt |
neq} PORT | range MIN-PORT MAX-PORT] {DST-IP-ADDR DST-IP-WILDCARD | host DST-IP-
ADDR | any} {DST-MAC-ADDR DST-MAC-WILDCARD | host DST-MAC-ADDR | any} [{eq | lt | gt |
neq} PORT | range MIN-PORT MAX-PORT] [TCP-FLAG] [cos OUTER-COS [inner INNER-COS]]
[vlan OUTER-VLAN [inner INNER-VLAN]] [[precedence PRECEDENCE] [tos TOS] | dscp DSCP]
[time-range PROFILE-NAME]
[SEQUENCE-NUMBER] {permit | deny} udp {SRC-IP-ADDR SRC-IP-WILDCARD | host SRC-IP-
ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any} [{eq | lt | gt |
neq} PORT | range MIN-PORT MAX-PORT] {DST-IP-ADDR DST-IP-WILDCARD | host DST-IP-
ADDR | any} {DST-MAC-ADDR DST-MAC-WILDCARD | host DST-MAC-ADDR | any} [{eq | lt | gt |
neq} PORT | range MIN-PORT MAX-PORT] [cos OUTER-COS [inner INNER-COS]] [vlan OUTER-
VLAN [inner INNER-VLAN]] [[precedence PRECEDENCE] [tos TOS] | dscp DSCP] [time-range
PROFILE-NAME]
[SEQUENCE-NUMBER] {permit | deny} icmp {SRC-IP-ADDR SRC-IP-WILDCARD | host SRC-IP-
ADDR | any} {SRC-MAC-ADDR SRC-MAC-WILDCARD | host SRC-MAC-ADDR | any} {DST-IP-
ADDR DST-IP-WILDCARD | host DST-IP-ADDR | any} {DST-MAC-ADDR DST-MAC-WILDCARD |
host DST-MAC-ADDR | any} [ICMP-TYPE [ICMP-CODE] | ICMP-MESSAGE] [cos OUTER-COS
[inner INNER-COS]] [vlan OUTER-VLAN [inner INNER-VLAN]] [[precedence PRECEDENCE] [tos
TOS] | dscp DSCP] [time-range PROFILE-NAME]
no SEQUENCE-NUMBER
Parameters
SEQUENCE-NUMBER
cos OUTER-COS
sp1(ID: 3999)
ext_mac(ID: 7999)
Specifies the sequence number. The range is from 1 to 65535. The
lower the number is, the higher the priority of the permit/deny rule.
(Optional) Specifies the outer priority value. This value must be
between 0 and 7.
56