2 ip access-group, 3 ip access-group all, 3 cli commands: differentiated services – PLANET WGS3-24240 User Manual

Page 423

Advertising
background image

User’s Manual of WGS3-24000 / WGS3-24240

423

specified by the srcip and srcmask parameters.The source layer 4 port match condition for the ACL rule are specified by the port

value parameter.The <startport> and <endport> parameters identify the first and last ports that are part of the port range. They

have values from 0 to 65535. The ending port must have a value equal or greater than the starting port. The starting port,

ending port, and all ports in between will be part of the destination port range.The <portvalue> parameter uses a single keyword

notation and currently has the values of domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, and www. Each of these values

translates into its equivalent port number, which is used as both the start and end of a port range. The command specifies a

destination ipaddress and destination mask for match condition of the ACL rule specified by the dstip and dstmask

parameters.The command specifies the TOS for an ACL rule depending on a match of precedence or DSCP values using the

parameters tos, tosmask ,dscp.

Default none

Format access-list {( <1-99> {deny | permit} <srcip> <srcmask>) | ( {<100-199> {deny | permit} {evry | {{icmp |

igmp | ip | tcp | udp | <number>} <srcip> <srcmask> [{eq {<portkey> | <portvalue>} | range <startport> <endport>}]

<dstip> <dstmask> [{eq {<portkey> | <portvalue>} | range <startport> <endport>}] [precedence <precedence>]

[tos <tos> <tosmask>] [dscp <dscp>]}})}

Mode

Global Config

9.2.1.1 no access-list

This command deletes an ACL that is identified by the parameter <accesslistnumber> from the

system.

Format no access-list <accesslistnumber>

Mode

Global Config

9.2.2 ip access-group

This command attaches a specified access-control list to an interface.

Default none

Format ip access-group <accesslistnumber> [in | out]

Mode

Interface Config

9.2.3 ip access-group all

This command attaches a specified access-control list to all interfaces.

Default none

Format ip access-group all <accesslistnumber> [in | out]

Mode

Global Config

9.3 CLI Commands: Differentiated Services

This chapter contains the CLI commands used for the QOS Differentiated Services (DiffServ) package.

The user configures DiffServ in several stages by specifying:

1. Class

creating and deleting classes

defining match criteria for a class. Note: The only way to remove an individual match criterion from an existing class

Advertising
This manual is related to the following products: