Alaxala AX3630S, Software Manual

Page: 401 / 875

18. Access Lists
373
permit (ip access-list extended)
Specifies the conditions by which the IPv4 packet filter permits access.
Syntax
To set or change information:
For AX3640S series switches:
[
<sequence>
] permit {
<filter-condition>
}[
<action-specification>
]
For AX3630S series switches:
[
<sequence>
] permit {
<filter-condition>
}
<filter-condition>
• When the upper-layer protocol is other than TCP, UDP, ICMP, and IGMP
{ip |
<protocol> } { <source ipv4> <source ipv4 wildcard> | host <source ipv4> | any}
{ <destination ipv4> <destination ipv4 wildcard> | host <destination ipv4> | any} [{[tos
<tos> ] [precedence <precedence> ] | dscp <dscp> }] [vlan <vlan id> ] [user-priority
<priority> ]
• When the upper-layer protocol is TCP
tcp {
<source ipv4> <source ipv4 wildcard> | host <source ipv4> | any}[{eq <source
port> | range <source port start> <source port end> }] { <destination ipv4>
<destination ipv4 wildcard> | host <destination ipv4> | any} [{eq <destination port> |
range <destination port start> <destination port end> }] [ack] [fin] [psh] [rst] [syn] [urg]
[{[tos <tos> ] [precedence <precedence> ] | dscp <dscp> }] [vlan <vlan id> ]
[user-priority <priority> ]
• When the upper-layer protocol is UDP
udp {
<source ipv4> <source ipv4 wildcard> | host <source ipv4> | any}[{eq <source
port> | range <source port start> <source port end> }] { <destination ipv4>
<destination ipv4 wildcard> | host <destination ipv4> | any} [{eq <destination port> |
range <destination port start> <destination port end> }] [{[tos <tos> ] [precedence
<precedence> ] | dscp <dscp> }] [vlan <vlan id> ] [user-priority <priority> ]
• When the upper-layer protocol is ICMP
icmp {
<source ipv4> <source ipv4 wildcard> | host <source ipv4> | any} { <destination
ipv4> <destination ipv4 wildcard> | host <destination ipv4> | any} [{ <icmp type>
[ <icmp code> ] | <icmp message> }] [{[tos <tos> ] [precedence <precedence> ] | dscp
<dscp> }] [vlan <vlan id> ] [user-priority <priority> ]
• When the upper-layer protocol is IGMP
igmp {
<source ipv4> <source ipv4 wildcard> | host <source ipv4> | any} { <destination
ipv4> <destination ipv4 wildcard> | host <destination ipv4> | any} [{[tos <tos> ]
[precedence <precedence> ] | dscp <dscp> }] [vlan <vlan id> ] [user-priority <priority> ]
<action-specification> [AX3640S] [OS-L3A]
action policy-list <policy list no.>
To delete information:
no <sequence>
Input mode
(config-ext-nacl)