Zte ZXR10 2910E-PS Configuration Manual page 89

source port number, UDP destination port number, ICMP type, ICMP Code and
DiffServ Code Point (DSCP).
8. L2 egress ACL: Match destination MAC address, source VLAN ID and 802. 1p
priority value, Ethernet network type and DSAP/SSAP.
9. Hybrid egress ACL: Match Source IPv4/IPv6 address, destination IPv4/IPv6
address, IP protocol type, TCP source port number, TCP destination port number,
UDP source port number, UDP destination port number, DiffServ Code Point
(DSCP), source MAC address, destination MAC address, source VLAN ID and
802. 1p priority value.
l Each ACL has an access list number to identify. The access list number is a number.
The access list number ranges of different types of ACL are shown below:
1. Basic ingress ACL: 1~99
2. Extended ingress ACL: 100~199
3. L2 ingress ACL: 200~299
4. Hybrid ingress ACL: 300~399, support IPv6
5. Basic egress ACL: 400~499
6. Extended egress ACL: 500~599
7. L2 egress ACL: 600-699
8. Hybrid egress ACL:700~799, supports IPv6
9. Global ACL: 800
l Each ACL has at most 500 rules and the range is 1-500.
Configuring ACL
The ACL configuration includes the following commands:
Command
zte(cfg)#set port <portlist> acl mode {port | vlan}
zte(cfg)#set port <portlist> acl <1-799>{enable | disable}
zte(cfg)#set vlan <vlanlist> acl <1-399>{enable | disable}
zte(cfg)#set acl <1-799> rule <1-500> time-range <word>{enable|disable}
zte(cfg)#create acl <1-800> name <name>
zte(cfg)#clear acl-name <1-800>
zte(cfg)#show port <portlist> acl-mode
zte(cfg)#config ingress-acl basic number <1-99>
zte(basic-acl-group)#rule <1-500>{permit | deny}{<source-ipaddr><sip-ma
sk>| any}[fragment]
zte(cfg)#clear ingress-acl basic number <1-99>
zte(cfg)#config ingress-acl extend number <100-199>
SJ-20120409144109-002|2012-07-02(R1.0)
Chapter 4 Service Configuration
Function
Sets port ACL binding mode.
Binds ACL instance to the port.
Binds ACL instance to the VLAN.
Executes an ACL action in a specific
time range.
Creates an ACL name.
Clears an ACL name.
Displays port ACL binding mode.
Creates and configures a basic ingress
ACL instance.
Sets a basic ingress ACL rule.
Clears a basic ingress ACL instance.
Creates and configures an extended
port ACL instance.
4-43
ZTE Proprietary and Confidential