User Manual

Table Of Contents
NETGEAR M4500 Series Switches CLI Command Reference Manual 550
Mode Global Config
Format IP extended ACL
access list <100-199> {remark <remark>} | { [<1-2147483647>] } {deny | permit} {every | { { <0-
255> | eigrp | gre | icmp | igmp | ip | ipinip | ospf | pim | tcp | udp } {<srcip> <srcmask> | any |
host <srcip>} [ {range {<portkey>|<startport>} {<portkey>|<endport>} } | {eq | neq | lt | gt}
{<portkey>|<0-65535>} ] {<dstip> <dstmask> | any | host <dstip>} [ {range {<portkey>|<startport>}
{<portkey>|<endport>} } | {eq | neq | lt | gt} {<portkey>|<0-65535>} ] [ flag [+fin | -fin] [+syn | -syn]
[+rst | -rst] [+psh | -psh] [+ack | -ack] [+urg | -urg] [established]] [icmp-type <icmp-type> [icmp-
code <icmp-code>] | icmp-message <icmp-message>] [igmp-type <igmp-type>] [dscp <value> |
precedence <0-7> | tos <tos> [<tosmask>] ] [fragments]} [log] [time-range time-range-name] [assign-
queue <queue-id>] [{mirror | redirect} {<slot/port> | port-channel <portchannel-id>}] [rate-limit <1-
4294967295> <1-128>]
deny | permit
To deny or permit the matching rule.
every
Matches every packet
<srcip> <srcmask>
Specify a source ip address and source netmask pair for the match condition of this IP
ACL rule.
host <srcip>
Specify host designated source ip address for this rule.
log
Enable logging for this access list rule
time-range-name
Specify the name of the time-range if the IP ACL rule has referenced a time range.
queue-id
Specify the queue identifier to which packets matching this rule are assigned
mirror | redirect
Specify the traffic matching the rule to be copied/redirected to the specific slot/port or
port-channel.
slot/port
The interface number to be mirrored or redirected to.
portchannel-id
The port channel ID to be mirrored or redirected to.
rate-limit
<1-4294967295>
<1-128>
Specifies the allowed rate of traffic as per the configured rate in <1-4294967295> kb/s,
and burst-size in <1-128> kilobytes
Parameter
Description
100-199
The access list number for the IP extended ACL.
remark
Adds a comment (remark) to an IP standard or IP extended ACL.
1-2147483647
Specifies a sequence number for the IP ACL rule. Every rule is assigned a sequence
number which is configured by user or generated by the system.
deny | permit
To deny or permit the matching rule.
every
Matches every packet