Zte ZXR10 2900 Series User Manual page 164

ZXR10 2900 Series User Manual
152 Confidential and Proprietary Information of ZTE CORPORATION
Command
rule <rule-id>{permit
zte(cfg)#
| deny}{<port-id>| any}{<ip-p
rotocol>| ip | tcp | udp | arp |
any}{<source-ipaddr wildcard>|
any}{<destination-ipaddr wildcard>|
any}[dscp <0-63>][fragment][cos
<0-7>][<source-vlanId>][<source-mac
wildcard>| any][<destination-mac
wildcard>| any]
rule-id: designate the sub-item of the global access control
�
list and the range is 1~16.
ip-protocol, ip, tcp, udp, arp, any: the matching protocol.
�
It can be one of the keyword "tcp", "udp", "arp"and "ip"
or an integer from 0 to 255 representing IP protocol. any
represents ignoring the protocol type.
Creating a global ACL instance means entering the configura-
tion mode of this instance, that is , global ACL configuration
mode.
12. To sort the rules in ACL instance, use the following command.
Command
move <rule-id>{after |
zte(cfg)#
before}<rule-id>
13. To delete a rule in ACL instance, use the following command.
Command
clear rule <rule-id>
zte(cfg)#
14. To show the information of a configured ACL instance, use the
following command.
Command
show acl config [<acl-number
zte(cfg)#
>|<acl-name>][rule <rule-id>| permit
| deny | active | passive | snmp |
command | policy | ports]
15. To display ACL configuration information of port, use the fol-
lowing command.
Command
show acl binding {all | port
zte(cfg)#
[<portlist>]| trunk [<trunklist>]}
Function
This configures a
global ACL rule.
Function
This sorts the rules in
ACL instance.
Function
This deletes a rule in
ACL instance.
Function
This shows the
information of a
configured ACL
instance.
Function
This displays
ACL configuration
information of port.