D-Link DWS-4000 Series Cli Command Reference page 411

fields may be specified using the keyword
parameters are all optional, but the most frequently used parameters appear in the same relative order as shown in the
command format.
The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule.
The allowed <queue-id> value is 0–7, and the number of user-configurable queues available for the switch is 8. The
assign-queue parameter is valid only for a permit rule.
Format
{deny | permit} {every | {{icmp | igmp | ip | tcp | udp | <number>} <srcip>
<srcmask> [{eq {<portkey> | <0-65535>} <dstip> <dstmask> [{eq {<portkey>| <0-
65535>}] [precedence <precedence> | tos <tos> <tosmask> | dscp <dscp>] [log]
[assign-queue <queue-id>] [mirror <slot/port>]
Mode Ipv4-Access-List Config
ip access-group
This command either attaches a specific IP ACL identified by <accesslistnumber> to an interface or associates with a
VLAN ID in a given direction. The parameter <name> is the name of the Access Control List.
An optional sequence number may be specified to indicate the order of this IP access list relative to other IP access lists
already assigned to this interface and direction. A lower number indicates higher precedence order. If a sequence number
is already in use for this interface and direction, the specified access list replaces the currently attached IP access list using
that sequence number. If the sequence number is not specified for this command, a sequence number that is one greater
than the highest sequence number currently in use for this interface and direction is used.
Default none
Format
ip access-group <accesslistnumber> <name> [vlan <vlan-id>] in>[sequence <1-
4294967295>]
Modes • Interface Config
• Global Config
no ip access-group
This command removes a specified IP ACL from an interface.
Default none
Format
no ip access-group <accesslistnumber> [vlan <vlan-id>] in
Mode • Interface Config
• Global Config
acl-trapflags
This command enables the ACL trap mode.
Default disabled
Format
acl-trapflags
Mode Global Config
to indicate a match on any value in that field. The remaining command
any
IP Access Control List Commands
403