PLANET WGS3-24000 - Manual (Page 379)

379
specified by the srcip and srcmask parameters.The source layer 4 port match condition for the ACL rule are specified by the port
value parameter.The and parameters identify the first and last ports that are part of the port range. They
have values from 0 to 65535. The ending port must have a value equal or greater than the starting port. The starting port,
ending port, and all ports in between will be part of the destination port range.The parameter uses a single keyword
notation and currently has the values of domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, and www. Each of these values
translates into its equivalent port number, which is used as both the start and end of a port range. The command specifies a
destination ipaddress and destination mask for match condition of the ACL rule specified by the dstip and dstmask
parameters.The command specifies the TOS for an ACL rule depending on a match of precedence or DSCP values using the
parameters tos, tosmask ,dscp.
▫ Default none
▫ Format access-list {( <1-99> {deny | permit} ) | ( {<100-199> {deny | permit} {evry | {{icmp |
igmp | ip | tcp | udp | } [{eq { | } | range }]
[{eq { | } | range }] [precedence ]
[tos ] [dscp ]}})}
▫ Mode Global Config
9.2.1.1 no access-list
This command deletes an ACL that is identified by the parameter from the
system.
▫ Format no access-list
▫ Mode Global Config
9.2.2 ip access-group
This command attaches a specified access-control list to an interface.
▫ Default none
▫ Format ip access-group [in | out]
▫ Mode Interface Config
9.2.3 ip access-group all
This command attaches a specified access-control list to all interfaces.
▫ Default none
▫ Format ip access-group all [in | out]
▫ Mode Global Config
9.3 CLI Commands: Differentiated Services
This chapter contains the CLI commands used for the QOS Differentiated Services (DiffServ) package.
The user configures DiffServ in several stages by specifying:
1. Class
▫ creating and deleting classes
▫ defining match criteria for a class. Note: The only way to remove an individual match criterion from an existing class