Allied Telesis AT-S94 CLI (AT-8000S Series) User Manual
Page 29
ACL Commands
Page 28
Parameters
•
disable-port — The Ethernet interface is disabled if the condition is matched.
•
source — Source IP address of the packet.
•
source-wildcard — Wildcard bits to be applied to the source IP address. Use 1s in the bit position to be
ignored.
•
destination — Packet’s destination IP address.
•
destination-wildcard — Wildcard bits to be applied to the destination IP address. Use 1s in the bit position to
be ignored.
•
protocol —The name or number of an IP protocol. Available protocol names: icmp, igmp, ip, tcp, egp, igp,
udp, hmp, rdp, idpr, idrp, rsvp, gre, esp, ah, eigrp, ospf, ipip, pim, l2tp, isis.: (Range: 0 - 255)
•
dscp number — Specifies the DSCP value.
•
ip-precedence number — Specifies the IP precedence value.
•
icmp-type — Specifies an ICMP message type for filtering ICMP packets. Enter a number, or one of the
following values: echo-reply, destination-unreachable, source-quench, redirect, alternate-host-
address, echo-request, router-advertisement, router-solicitation, time-exceeded, parameter-problem,
timestamp, timestamp-reply, information-request, information-reply, address-mask-request, address-
mask-reply, traceroute, datagram-conversion-error, mobile-host-redirect, mobile-registration-request,
mobile-registration-reply, domain-name-request, domain-name-reply, skip, photuriss. (Range: 0 - 255)
•
icmp-code — Specifies an ICMP message code for filtering ICMP packets. (Range: 0 - 255)
•
igmp-type — GMP packets can be filtered by IGMP message type. Enter a number, or one of the following
values: host-query, host-report, dvmrp, pim, cisco-trace, host-report-v2, host-leave-v2, host-report-v3.
(Range: 0 - 255)
•
destination-port — Specifies the UDP/TCP destination port. (Range: 1 - 65535)
•
source-port — Specifies the UDP/TCP source port. (Range: 1 - 65535)
•
flags list-of-flags — List of TCP flags that should occur. If a flag is intended to be set, it is prefixed by ‘+’.If a
flag should be unset it is prefixed by ‘-’. Available options are: +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack,
-psh, -rst, -syn and -fin. The flags are concatenated to a single string. For example: +fin-ack.
I P P r o t o c o l
A b b r e v i a t e d N a m e
P r o t o c o l N u m b e r
Internet Control Message Protocol
icmp
1
Internet Group Management Protocol
igmp
2
Transmission Control Protocol
tcp
6
Exterior Gateway Protocol
egp
8
Interior Gateway Protocol
igp
9
User Datagram Protocol
udp
17
Host Monitoring Protocol
hmp
20
Reliable Data Protocol
rdp
27
Inter-Domain Policy Routing Protocol
idpr
35
Ipv6 protocol
ipv6
41
Routing Header for IPv6
ipv6-route
43
Fragment Header for IPv6
ipv6-frag
44
Inter-Domain Routing Protocol
idrp
45
Reservation Protocol
rsvp
46