Netgear gsm7312 사용자 설명서

User Manual for the NETGEAR 7300 Series Layer 3 Managed Switch Software

ACL Commands

10-3

202-10009-01

Format

config acl rule delete <aclid> <rulenum>

config acl rule action

This command removes a rule from the ACL referenced by the parameter

<aclid>.

The rule is

identified by the

<rulenum>

parameter. The values of

permit

deny

indicate how this rule is

evaluated.

Format

config acl rule action <aclid> <rulenum> <permit/deny>

config acl rule match dstip

This command specifies a destination IP Address and Mask match condition for an ACL rule
referenced by the

<aclid>

and

<rulenum>.

The

<ipaddr>

and

<ipmask>

parameters are 4-

digit dotted-decimal numbers which represent the destination IP Address and IP Mask,
respectively.

Format

config acl rule match dstip <aclid> <rulenum> <ipaddr> <ipmask>

config acl rule match dstl4port keyword

This command specifies a destination layer 4 port match condition for an ACL rule referenced by
the

<aclid>

and

<rulenum>

. The

<portkey>

parameter uses a single keyword notation and

currently has the values of

domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp

and

www

. Each of these values translates into its equivalent port number, which is used as both the

start and end of a port range.

This command and the

config acl match destl4port range

command are two methods of

specifying the destination layer 4 port range as a match condition. Either command can be used to
configure or modify the destination layer 4 port range.

Format

config acl rule match dstl4port keyword <aclid> <rulenum> <portkey>