Security network acl rate, Security network acl add – PLANET WGSW-20160HP User Manual

Page 425

Advertising
background image

User’s Manual of WGSW-20160HP

Security Network ACL Rate

Description:

Set or show the ACL rate limiter.

Syntax:

Security Network ACL Rate [<rate_limiter_list>] [<rate>]

Parameters:

<rate_limiter_list>

: Rate limiter list (1-16), default: All rate limiters

<rate>

: Rate in pps (0-131071)

Default Setting:

1

Security Network ACL Add

Description:

Add or modify Access Control Entry (ACE).

If the ACE ID parameter <ace_id> is specified and an entry with this ACE ID already exists, the ACE will be modified.

Otherwise, a new ACE will be added. If the ACE ID is not specified, the next available ACE ID will be used.

If the next ACE ID parameter <ace_id_next> is specified, the ACE will be placed before this ACE in the list. If the next

ACE ID is not specified, the ACE will be placed last in the list.

If the Switch keyword is used, the rule applies to all ports. If the Port keyword is used, the rule applies to the specified port

only. If the Policy keyword is used, the rule applies to all ports configured with the specified policy. The default is that the

rule applies to all ports.

Syntax:

Security Network ACL Add [<ace_id>] [<ace_id_next>] [(port <port>)] [(policy <policy> <policy_bitmask>)] [<vid>]

[<tag_prio>] [<dmac_type>] [(etype [<etype>] [<smac>] [<dmac>]) | (arp [<sip>] [<dip>] [<smac>] [<arp_opcode>]

[<arp_flags>]) | (ip [<sip>] [<dip>] [<protocol>] [<ip_flags>]) | (icmp [<sip>] [<dip>] [<icmp_type>] [<icmp_code>]

[<ip_flags>]) | (udp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]) | (tcp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]

[<tcp_flags>])] [permit|deny] [<rate_limiter>] [<port_redirect>] [<logging>] [<shutdown>]

Parameters:

<ace_id>

: ACE ID (1-512), default: Next available ID

<ace_id_next>

: Next ACE ID (1-512), default: Add ACE last

port

: Port ACE keyword

<port>

: Port number or 'all'

policy

: Policy ACE keyword

425

Advertising