ip access-list extended
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
343
Alcatel-Lucent
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
IP
ACCESS
-
LIST
EXTENDED
ip access-list extended
{<
100-199
>|<
2000-2699
>|
<access-list-
name>
}
D
ESCRIPTION
Enter this command in the Configuration
mode. This command is used to define a
named access list, and enters Extended Access-list Configuration mode.
P
ARAMETERS
D
EFAULT
V
ALUE
None.
E
XAMPLE
ALU(config)# ip access-list extended test
ALU(config-ext-nacl)#
Configure Extended IP Access-list Rule
This command is used to configure a rule for a Extended IP Access-List. You can
configure multiple rules for an IP access list.
{
permit
|
deny
}
{
igre
|
icmp
|
ip
|
ipinip
|
pim
|
rsvp
|
tcp
|
udp
|<
0-
255
>} {
any
|
host
<
host-ip-address
>|
<source-ip-address/prefix-
length>
|<
source-ip-address subnet-mask
>} [
operators
]
{
any
|
host
<
host-ip-address
>|
<destination-ip-address/prefix-
length>
|<
destination-ip-address subnet-mask
>} [
log
] [
log-
input
] [
enable fragment
] [
precedence
[<
0-7
>|<
keywords
>] [
tos
[<
0-15
>|<
keywords
>]]]
Parameter
Description
<
100-199
>|<
2000-
2699
>
IP access list number.
access-list-name
Name of the access list.
Parameter
Description
permit
Result is permit if conditions are matched.
{
igre
|
icmp
|
ip
|
ip
inip
|
pim
|
rsvp
|
tcp
|
udp
|<
0-
255
>}
Name or number of an Internet protocol. If a protocol is not
specified, the access-list entry applies to all protocols.
deny
Result is deny if conditions are matched.
