User Manual

Table Of Contents
NETGEAR M4500 Series Switches CLI Command Reference Manual 556
the ACL rule is applied when the time-range with specified name becomes active. The ACL rule is removed when
the time-range with specified name becomes inactive.
Format {deny | permit} {{every [rule-id] [assign-queue <queue-id>] [log] [{{mirror | redirect} <slot/port> | port-
channel <port-channel-group-id>}] [rate-limit <1-4294967295> <1-128>] [sequence <1-2147483647>]
[time-range <name>]} | {{<0-255> | icmp | ip | tcp | udp} {<source-ip/source-mask> | any | host
<srcip>} [eq {<0-65535> | <portkey>}] {<destination-ip/destination-mask> | any | host <dstip>} [eq {<0-
65535> | <portkey>}] [flag [+fin | -fin] [+syn | -syn] [+rst | -rst] [+psh | -psh] [+ack | -ack] [+urg | -urg]
[established]] [dscp <value>] [flow-label <vlaue>] [icmp-type <icmp-type> [icmp-code <icmp-code>] |
icmp-message <icmp-message>] [fragments] [routing] [rule-id] [assign-queue <queue-id>] [log] [{{mirror
| redirect} <slot/port> | port-channel <port-channel-group-id>}] [rate-limit <1-4294967295> <1-128>]
[sequence <1-2147483647>] [time-range <name>] }}
Parameter
Description
deny or permit
Specifies whether the IP ACL rule permits or denies the matching traffic.
every
Specifies to match every packet.
[rule-id]
Specifies a rule ID, the value range from 1 to 1023.
[assign-queue <queue-id>]
Specifies the assign-queue, which is the queue identifier to which packets
matching this rule are assigned, the value range from 0 to 7.
[log]
Specifies that this rule is to be logged.
{mirror | redirect}
{<slot/port> | port-channel
<port-channel-group-id>}
Specifies the mirror or redirect interface which is the unit/slot/port to which
packets matching this rule are copied or forwarded, respectively.
rate-limit <rate> <burst-size>
Specifies the allowed rate of traffic as per the configured rate in kbps range
from 1 to 4294967295, and burst-size in kbytes range from 1 to 128.
sequence <sequence-
number>
Specifies a sequence number for the ACL rule. Every rule receives a sequence
number. The sequence number is specified by the user or is generated by the
device, the value range from 1 to 2147483647.
time-range <name>
Specifies a time limitation on the ACL rule as defined by the parameter time-
range-name.
<0-255>
Specifies the protocol to match for the IP ACL rule, the value range from 0 to
255.
<source-ip/source-mask>
Specifies a source IP address and mask to match for the IP ACL rule.
<destination-ip/destination-
mask>
Specifies a destination IP address and mask to match for the IP ACL rule.
Any
Specifying any implies specifying0.0.0.0 with mask 255.255.255.255.
host <srcip>
Specifying host source IP address implies matching the specified IP address.
host <dstip>
Specifying host destination IP address implies matching the specified IP address.