250 © 2001- 2008 D-Link Corporation/D-Link Systems, Inc. All Rights Reserved.
CLI Command Reference
Format
access-list
<1-99> {deny | permit} {every | <srcip> <srcmask>}
[log] [assign-queue <queue-id>]
Mode
Global Config
IP Extended ACL:
Format
access-list
<100-199> {deny | permit} {every | {{icmp | igmp |
ip | tcp | udp | <number>} <srcip> <srcmask>[{eq {<portkey> |
<0-65535>} <dstip> <dstmask> [{eq {<portkey>| <0-65535>}] [pre-
cedence <precedence> | tos <tos> <tosmask> | dscp <dscp>] [log]
[assign-queue <queue-id>]
Mode
Global Config
no access-list
This command deletes an IP ACL that is identified by the parameter
<
accesslistnumber>
from the system. The range for
<
accesslistnumber>
1-99 for standard access lists and 100-
199 for extended access lists.
Table 10.
ACL Command Parameters
Parameter
Description
<1-99> or <100-199>
Range 1 to 99 is the access list number for an IP standard ACL.
Range 100 to 199 is the access list number for an IP extended
ACL.
{deny | permit}
Specifies whether the IP ACL rule permits or denies an action.
Note: For assign-queue, attributes are configurable for a deny
rule, but they have no operational effect.
every
Match every packet
{icmp | igmp | ip | tcp |
udp | <number>}
Specifies the protocol to filter for an extended IP ACL rule.
<srcip> <srcmask>
Specifies a source IP address and source netmask for match
condition of the IP ACL rule.
[{eq {<portkey> |
<0-65535>}]
Specifies the source layer 4 port match condition for the IP
ACL rule. You can use the port number, which ranges from 0-
65535, or you specify the
<portkey>
, which can be one of the
following keywords:
domain, echo, ftp, ftpdata,
http, smtp, snmp, telnet, tftp
, and
www
. Each of
these keywords translates into its equivalent port number,
which is used as both the start and end of a port range.
<dstip> <dstmask>
Specifies a destination IP address and netmask for match condi-
tion of the IP ACL rule.
[precedence <precedence>
| tos <tos> <tosmask> |
dscp <dscp>]
Specifies the TOS for an IP ACL rule depending on a match of
precedence or DSCP values using the parameters
dscp
,
pre-
cedence
,
tos/tosmask
.
[log]
Specifies that this rule is to be logged.
[assign-queue <queue-id>]
Specifies the assign-queue, which is the queue identifier to
which packets matching this rule are assigned.
Summary of Contents for DWL-8500AP
Page 4: ...4 2001 2008 D Link Corporation D Link Systems Inc All Rights Reserved CLI Command Reference...
Page 24: ...24 2001 2008 D Link Corporation D Link Systems Inc All Rights Reserved CLI Command Reference...
Page 26: ...26 2001 2008 D Link Corporation D Link Systems Inc All Rights Reserved CLI Command Reference...
Page 138: ...138 2001 2008 D Link Corporation D Link Systems Inc All Rights Reserved CLI Command Reference...
Page 226: ...226 2001 2008 D Link Corporation D Link Systems Inc All Rights Reserved CLI Command Reference...
Page 292: ...292 2001 2008 D Link Corporation D Link Systems Inc All Rights Reserved CLI Command Reference...
