| acl-eth-header-fields |
destination-mac-address destination-mac-address-mask source-mac-address source-mac-address-mask |
fields in ethernet header |
| acl-ip-header-fields |
source-port-range destination-port-rangedscp ip-protocol |
Header fields common to ipv4 and ipv6 |
| acl-ipv4-header-fields |
destination-ipv4-address source-ipv4-address |
fields in IPv4 header |
| acl-ipv6-header-fields |
destination-ipv6-address source-ipv6-address flow-label |
fields in IPv6 header |
| acl-transport-header-fields |
source-port-range destination-port-range |
Transport header fields |
| metadata |
input-interface absolute |
Fields associated with a packet but not in the header |
| timerange |
absolute |
Define time range entries to restrict
the access. The time range is identified by a name
and then referenced by a function, so that those
time restrictions are imposed on the function itself. |