Filter
Top Products
7000 Series L3 Managed Switch Reference Manual for Software v2.0
ACL Commands 10-3
config acl rule delete
This command removes a rule from the ACL referenced by the parameter <aclid>. The rule is
identified by the
<rulenum> parameter.
Format config acl rule delete <aclid> <rulenum>
config acl rule action
This command removes a rule from the ACL referenced by the parameter <aclid>. The rule is
identified by the
<rulenum> parameter. The values of permit or deny indicate how this rule is
evaluated.
Format config acl rule action <aclid> <rulenum> <permit/deny>
config acl rule match dstip
This command specifies a destination IP Address and Mask match condition for an ACL rule
referenced by the
<aclid> and <rulenum>. The <ipaddr> and <ipmask> parameters are 4-
digit dotted-decimal numbers which represent the destination IP Address and IP Mask,
respectively.
Format config acl rule match dstip <aclid> <rulenum> <ipaddr> <ipmask>
config acl rule match dstl4port keyword
This command specifies a destination layer 4 port match condition for an ACL rule referenced by
the
<aclid> and <rulenum>. The <portkey> parameter uses a single keyword notation and
currently has the values of
domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp,
and
www. Each of these values translates into its equivalent port number, which is used as both the
start and end of a port range.
This command and the
config acl match destl4port range command are two methods of
specifying the destination layer 4 port range as a match condition. Either command can be used to
configure or modify the destination layer 4 port range.
Format config acl rule match dstl4port keyword <aclid> <rulenum> <portkey>