Graco GE-DS-242-POE User Manual
Chapter 6: Command Line Interface
GE-DS-242-PoE Managed Ethernet Switch User Manual
179
acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255>
Description:
Add or edit ACL group for Ipv4.
Syntax:
acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255> A.B.C.D A.B.C.D
A.B.C.D A.B.C.D (check|unCheck) <0-65535> <0-26>
Parameters:
(add|edit) specifies the operation.
<1-220> specifies the group id.
(permit|deny) specifies the action. permit: permit packet cross switch; deny: drop
packet.
<0-4094> specifies the VLAN id. 0 means don't care.
<0-255> specifies the IP protocol. 0 means don't care.
A.B.C.D specifies the Source IP address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means
compare all.
A.B.C.D specifies the Destination IP Address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means
compare all.
(check|unCheck) specifies the IP Fragment. check: Check IP fragment field; unCheck:
Not check IP fragment field.
<0-65535> specifies the Destination port number if TCP or UDP. 0 means don't care.
<0-26> specifies the Port id. 0 means don't care.
e.g.
Description:
Add or edit ACL group for Ipv4.
Syntax:
acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255> A.B.C.D A.B.C.D
A.B.C.D A.B.C.D (check|unCheck) <0-65535> <0-26>
Parameters:
(add|edit) specifies the operation.
<1-220> specifies the group id.
(permit|deny) specifies the action. permit: permit packet cross switch; deny: drop
packet.
<0-4094> specifies the VLAN id. 0 means don't care.
<0-255> specifies the IP protocol. 0 means don't care.
A.B.C.D specifies the Source IP address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means
compare all.
A.B.C.D specifies the Destination IP Address. 0.0.0.0 means don't care.
A.B.C.D specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means
compare all.
(check|unCheck) specifies the IP Fragment. check: Check IP fragment field; unCheck:
Not check IP fragment field.
<0-65535> specifies the Destination port number if TCP or UDP. 0 means don't care.
<0-26> specifies the Port id. 0 means don't care.
e.g.
Switch(config)# acl add 1 deny 1 ipv4 0 192.168.1.1 255.255.255.255 0.0.0.0 0.0.0.0 unCheck 0 0
This ACL rule will drop all packet from IP is 192.168.1.1 with VLAN id=1 and IPv4.