Chapter 4: Feature Configuration - CLI
Featuring Configuration
– CLI
NGSME16T2H User Manual | 223
digit) or 'any'
: Destination MAC address
('xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx', x is
a hexadecimal digit) or 'any'
arp : ARP keyword
: Source IP address (a.b.c.d/n) or 'any'
: Destination IP address (a.b.c.d/n) or 'any'
: ARP operation code: any|arp|rarp|other
: ARP flags: request|smac|tmac|len|ip|ether
[0|1|any]
ip : IP keyword
: IP protocol number (0-255) or 'any'
: IP flags: ttl|options|fragment [0|1|any]
icmp : ICMP keyword
: ICMP type number (0-255) or 'any'
: ICMP code number (0-255) or 'any'
udp : UDP keyword
: Source UDP/TCP port range (0-65535) or
'any'
: Destination UDP/TCP port range (0-65535)
or 'any'
tcp : TCP keyword
: TCP flags: fin|syn|rst|psh|ack|urg [0|1|any]
permit : Permit forwarding (default)
deny : Deny forwarding
: Rate limiter number (1-15) or 'disable'
: Port list for copy of frames or 'disable'
: Mirror of frames: enable|disable
: System logging of frames: log|log_disable
: Shut down ingress port: shut|shut_disable
Example:
Add one ACE:
Security/Network/ACL>add 2 port 6-10 policy 3 8 ip
