Owner's Manual

330 | Chapter 13. ACLs
NETGEAR 8800 User Manual
L4DP destination-port <number> (a single port)
L4SP source-port <number> (a single port)
DSCP dscp <number>
TCP-Flag TCP-flags <bitfield>
First Fragment first-fragments
L4-Range A Layer 4 port range. For example, if you specify “protocol UDP” and “port 200 -
1200” in an entry, you have used a Layer 4 range. There are a total of sixteen
Layer 4 port ranges. Also, you can have a source port range, or a destination port
range, but not both kinds of ranges together in the same entry.
DIPv6/128 destination address <prefix> (IPv6 address with a prefix length longer than 64)
SIPv6/128 source address <prefix> (IPv6 address with a prefix length longer than 64)
DIPv6/64 destination address <prefix> (IPv6 address with a prefix length up to 64)
SIPv6/64 source address <prefix> (IPv6 address with a prefix length up to 64)
NH IPv6 Next Header field. Use protocol <number> to match.
TC IPv6 Traffic Class field. Use dscp <number>
MACDA ethernet-destination-address <mac-address> <mask>
MACSA ethernet-source-address <mac-address>
Etype ethernet-type <number>
VID This is not a match condition used in ACLs, but is used when an ACL is applied to
VLANs. An ACL applied to a port uses a different field selector than an ACL
applied to a VLAN.
TOS ip-tos <number>
Port-list This is not a match condition used in ACLs, but is used when an ACL is applied to
ports, or to all ports (the wildcard ACL). An ACL applied to a port uses a different
field selector than an ACL applied to a VLAN.
packet-type This selector is used internally and not accessible by users through explicit ACLs.
UDF User-defined field. This selector is used internally and not accessible by users
through explicit ACLs.
Egress
VlanId vlan-id
DaMac ethernet-destination-address
SaMac ethernet-source-address
EtherType ethernet-type
Table 34. Abbreviations Used in Field Selector Tables (Continued)
Abbreviation Condition