D-Link DXS-3600 Series Reference Manual page 60

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
tos TOS
lt PORT
gt PORT
eq PORT
neq PORT
range MIN-PORT MAX-PORT
TCP-FLAG
fragments
time-range PROFILE-NAME
tcp, udp, igmp, ipinip, gre,
esp, eigrp, ospf, pcp, pim,
vrrp
PROTOCOL-ID
ICMP-TYPE
ICMP-CODE
ICMP-MESSAGE
Default
None.
Command Mode
IP Access-list Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
If a rule entry is created without a sequence number, a sequence number will be automatically assigned.
If it is the first entry, the sequence number 10 is assigned. A subsequent rule entry will be assigned a
af42 - 100100, af43 - 100110, cs1 - 001000, cs2 - 010000, cs3 -
011000, cs4 - 100000, cs5 - 101000, cs6 - 110000, cs7 - 111000,
default - 000000, ef – 101110.
(Optional) Specifies that packets can be filtered by type of service
level, as specified by a number from 0 to 15.
(Optional) Specifies to match if less than the specified port number.
(Optional) Specifies to match if greater than the specified port number.
(Optional) Specifies to match if equal to the specified port number.
(Optional) Specifies to match if not equal to the specified port number.
(Optional) Specifies to match if fall within the range of ports.
(Optional) Specifies the TCP flag fields and the specified TCP header
bits called ack (acknowledge), fin (finish), psh (push), rst (reset), syn
(synchronize), or urg (urgent).
(Optional) Specifiese the packet fragment's filtering
(Optional) Specifies the name of the time period profile associated with
the access list delineating its activation period.
Specifies Layer 4 protocols.
(Optional) Specifies the protocol ID. The valid value is from 0 to 255.
(Optional) Specifies the ICMP message type. The valid number for the
message type is from 0 to 255.
(Optional) Specifies the ICMP message code. The valid number for the
message code is from 0 to 255.
(Optional) Specifies the ICMP message. The pre-defined parameters
are available for selection: administratively-prohibited,alternate-
address,conversion-error,host-prohibited,net-prohibited,echo,echo-
reply,pointer-indicates-error,host-isolated,host-precedence-
violation,host-redirect,host-tos-redirect,host-tos-unreachable,host-
unknown,host-unreachable, information-reply,information-
request,mask-reply,mask-request,mobile-redirect,net-redirect,net-tos-
redirect,net-tos-unreachable, net-unreachable,net-unknown,bad-
length,option-missing,packet-fragment,parameter-problem,port-
unreachable,precedence-cutoff, protocol-unreachable,reassembly-
timeout,redirect-message,router-advertisement,router-
solicitation,source-quench,source-route-failed, time-
exceeded,timestamp-reply,timestamp-request,traceroute,ttl-
expired,unreachable.
60