NETGEAR NETGEAR user manual Access-list, Default

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

Note: This does not include the implicit 'deny all' rule defined at the end of every MAC ACL.

Interfaces	Displays the list of interfaces (slot/port) to which this MAC ACL
	is attached in a given direction.
Direction	Denotes the direction in which this MAC ACL is attached to the
	set of interfaces listed. The possible values are Inbound or Out-
	bound.

access-list

This command creates an Access Control List (ACL) that is identified by the parameter

<accesslistnumber>. The ACL number is an integer from 1 to 199. The range 1 to 99 is for normal ACL List and 100 to 199 is extended ACL List. The ACL rule is created with the option of permit or deny . The protocol to filter for an ACL rule is specified by giving the protocol to be used like cmp,igmp,ip,tcp,udp. The command specifies a source ipaddress and source mask for match condition of the ACL rule specified by the srcip and srcmask parameters.The source layer 4 port match condition for the ACL rule are specified by the port value parameter.The <startport> and <endport> parameters identify the first and last ports that are part of the port range. They have values from 0 to 65535. The ending port must have a value equal or greater than the starting port. The starting port, ending port, and all ports in between will be part of the destination port range.The <portvalue> parameter uses a single keyword notation and currently has the values of domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, and www. Each of these values translates into its equivalent port number, which is used as both the start and end of a port range. The command specifies a destination ipaddress and destination mask for match condition of the ACL rule specified by the dstip and dstmask parameters.The command specifies the TOS for an ACL rule depending on a match of precedence or DSCP values using the parameters tos, tosmask ,dscp.

Default	none
Format	access-list {( <1-99> {deny permit} <srcip> <src-
	mask>) ({<100-199> {deny permit} {evry {{icmp
	igmp ip tcp udp <number>} <srcip> <srcmask>
	[{eq {<portkey> <portvalue>} range <startport>
	<endport>}] <dstip> <dstmask> [{eq {<portkey>
	<portvalue>} range <startport> <endport>}] [prece-
	dence <precedence> tos <tos> <tosmask> dscp
	<dscp>] [assign-queue <queue-id>] [redirect <slot/
	port>]}})}
Mode	Global Config

Quality of Service (QoS) Commands 11-5

202-10088-01, March 2005