KTI Networks KGS-2421 Manual de usuario Pagina 57

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 120
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 56
Description:
Add or modify Access Control Entry (ACE).
If the ACE ID parameter <ace_id> is specified and an entry with this ACE ID already exists,
the ACE will be modified. Otherwise, a new ACE will be added. If the ACE ID is not
specified, the next available ACE ID will be used.
If the next ACE ID parameter <ace_id_next> is specified, the ACE will be placed before this
ACE in the list. If the next ACE ID is not specified, the ACE will be placed last in the list.
If the Switch keyword is used, the rule applies to all ports. If the Port keyword is used, the
rule applies to the specified port only. If the Policy keyword is used, the rule applies to all
ports configured with the specified policy. The default is that the rule applies to all ports.
Syntax:
Security Network ACL Add [<ace_id>] [<ace_id_next>] [switch | (port <port>) | (policy
<policy>)] [<vid>] [<tag_prio>] [<dmac_type>] [(etype [<etype>] [<smac>] [<dmac>]) | (arp
[<sip>] [<dip>] [<smac>] [<arp_opcode>] [<arp_flags>]) | (ip [<sip>] [<dip>]
[<protocol>] [<ip_flags>]) |(icmp [<sip>] [<dip>] [<icmp_type>] [<icmp_code>]
[<ip_flags>]) | (udp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]) | (tcp [<sip>]
[<dip>] [<sport>] [<dport>] [<ip_flags>] [<tcp_flags>])][permit|deny] [<rate_limiter>]
[<port_copy>] [<logging>] [<shutdown>]
Parameters:
<ace_id> : ACE ID (1-128), default: Next available ID
<ace_id_next> : Next ACE ID (1-128), default: Add ACE last
switch : Switch ACE keyword
port : Port ACE keyword
<port> : Port number
policy : Policy ACE keyword
<policy> : Policy number (1-8)
<vid> : VLAN ID (1-4095) or 'any'
<tag_prio> : VLAN tag priority (0-7) or 'any'
<dmac_type> : DMAC type: any|unicast|multicast|broadcast
etype : Ethernet Type keyword
<etype> : Ethernet Type or 'any'
<smac> : Source MAC address (xx-xx-xx-xx-xx-xx) or 'any'
<dmac> : Destination MAC address (xx-xx-xx-xx-xx-xx) or 'any'
Vista de pagina 56
1 2 ... 52 53 54 55 56 57 58 59 60 61 62 ... 119 120

Comentarios a estos manuales

Sin comentarios