Filter
Top Products
144
tos—— Enter the IP ToS contained in the rule.
pri —— Enter the IP Precedence contained in the rule.
Command Mode
Global Configuration Mode
Example
Create an Extended-IP ACL whose ID is 220, and add Rule 10 for it. In the rule,
the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, the time-range for the rule to take effect is tSeg1, and the
packets match this rule will be forwarded by the switch:
TL-SG3424(config)# access-list create 220
TL-SG3424(config)# access-list extended 220 rule 10 permit sip
192.168.0.100 smask 255.255.255.0 tseg tSeg1
rule
Description
The rule command is used to configure MAC ACL rule. To delete the
corresponding rule, please use no rule command.
Syntax
rule rule-id [ deny | permit ] [[ smac source-mac ] smask source-mac-mask ]
[[ dmac destination-mac ] dmask destination-mac-mask ] [ vid vlan-id ] [ type
ethernet-type ] [ pri user-pri ] [ tseg time-segment ]
no rule rule-id
Parameter
rule-id —— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
source-mac —— The source MAC address contained in the rule.
source-mac-mask —— The source MAC address mask. It is required if you
typed the source MAC address.
destination-mac —— The destination MAC address contained in the rule.
destination-mac-mask —— The destination MAC address mask. It is required
if you typed the destination MAC address.
vlan-id —— The VLAN ID contained in the rule, ranging from 1 to 4094.