Interlogix GE-DS-242-PoE User Manual

Page 191

Advertising
background image

Chapter 6: Command Line Interface

GE-DS-242-PoE Managed Ethernet Switch User Manual

187

acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255>

Description:

Add or edit ACL group for Ipv4.

Syntax:

acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255> A.B.C.D A.B.C.D
A.B.C.D A.B.C.D (check|unCheck) <0-65535> <0-26>

Parameters:

(add|edit)

specifies the operation.

<1-220>

specifies the group id.

(permit|deny)

specifies the action. permit: permit packet cross switch; deny:

drop packet.

<0-4094>

specifies the VLAN id. 0 means don't care.

<0-255>

specifies the IP protocol. 0 means don't care.

A.B.C.D

specifies the Source IP address. 0.0.0.0 means don't care.

A.B.C.D

specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means

compare all.

A.B.C.D

specifies the Destination IP Address. 0.0.0.0 means don't care.

A.B.C.D

specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means

compare all.

(check|unCheck)

specifies the IP Fragment. check: Check IP fragment field;

unCheck: Not check IP fragment field.

<0-65535>

specifies the Destination port number if TCP or UDP. 0 means don't

care.

<0-26>

specifies the Port id. 0 means don't care.

e.g.

Switch(config)# acl add 1 deny 1 ipv4 0 192.168.1.1 255.255.255.255 0.0.0.0 0.0.0.0
unCheck 0 0

This ACL rule will drop all packet from IP is 192.168.1.1 with VLAN id=1 and
IPv4.

Advertising