Filter
Top Products
User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software
Quality of Service (QoS) Commands 11-5
202-10088-01, March 2005
Note: This does not include the implicit 'deny all' rule defined at the end of every MAC ACL.
Interfaces Displays the list of interfaces (slot/port) to which this MAC ACL
is attached in a given direction.
Direction Denotes the direction in which this MAC ACL is attached to the
set of interfaces listed. The possible values are Inbound or Out-
bound.
access-list
This command creates an Access Control List (ACL) that is identified by the parameter
<
accesslistnumber>. The ACL number is an integer from 1 to 199. The range 1 to 99 is for
normal ACL List and 100 to 199 is extended ACL List. The ACL rule is created with the option of
permit or deny . The protocol to filter for an ACL rule is specified by giving the protocol to be
used like cmp,igmp,ip,tcp,udp. The command specifies a source ipaddress and source mask for
match condition of the ACL rule specified by the srcip and srcmask parameters.The source layer 4
port match condition for the ACL rule are specified by the port value parameter.The <
startport>
and <endport> parameters identify the first and last ports that are part of the port range. They
have values from 0 to 65535. The ending port must have a value equal or greater than the starting
port. The starting port, ending port, and all ports in between will be part of the destination port
range.The <
portvalue> parameter uses a single keyword notation and currently has the values of
domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, and www. Each of these
values translates into its equivalent port number, which is used as both the start and end of a port
range. The command specifies a destination ipaddress and destination mask for match condition of
the ACL rule specified by the dstip and dstmask parameters.The command specifies the TOS for
an ACL rule depending on a match of precedence or DSCP values using the parameters tos,
tosmask ,dscp.
Default none
Format
access-list {( <1-99> {deny | permit} <srcip> <src-
mask>) | ({<100-199> {deny | permit} {evry | {{icmp |
igmp | ip | tcp | udp | <number>} <srcip> <srcmask>
[{eq {<portkey> | <portvalue>}| range <startport>
<endport>}] <dstip> <dstmask> [{eq {<portkey> |
<portvalue>} | range <startport> <endport>}] [prece-
dence <precedence> | tos <tos> <tosmask> | dscp
<dscp>] [assign-queue <queue-id>] [redirect <slot/
port>]}})}
Mode Global Config