Protocol Independent Features
Left running head:
Chapter name (automatic)
336
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
Alcatel-Lucent
ACCESS
-
LIST
(
EXTENDED
)
access-list
{<
100-199
>|<
2000-2699
>} {
deny
|
permit
} {<
0-255
>
|
gre
|
icmp
|
ipinip
|
pim
|
rsvp
|
tcp
|
udp
} {
source-ip-address
[
source
-
network-number
]|
source-ip-address/prefix-length
|
any
|
host
<
source-host-ipaddress
>} {
destination-ip-address
[
destination
-
network-number
]|
destination-ip-address/prefix-length
|
any
|
host
<
destination-host-ipaddress
>}[
log
]
D
ESCRIPTION
This command is used to configure a Extended Access-list. Extended Access-list
uses both source IP address and destination IP address.
P
ARAMETERS
Parameter
Description
<
100-199
>|<
2000-2699
>
Access list number.
0-255
IP protocol number. Access list is applied only If
packet belongs to the specified protocol number.
deny
Denies access for matching conditions.
permit
Permits access for matching conditions.
gre
|
icmp
|
ipinip
|
pim
|
rsv
p
|
tcp
|
udp
Access list is applied only If packet belongs to the
specified protocol.
source-ip-address
[
source
-
network-number
]
Source IP address network.
source-ip-address/
prefix-length
Source IP address network.
any
From any network.
host
Specify single host IP address.
source-host-ipaddress
Source IP address.
destination-ip-address
[
destination
-
network-
number
]
Destination IP address network.
destination ip-address/
prefix-length
Destination IP address network.
destination-host-
ipaddress
Destination IP address.
log
If access list is matched, logs the message.
