C613-50057-01 REV A
Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch
863
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
IP
V
4 S
OFTWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST
EXTENDED
(
NAMED
)
Syntax [tcp|udp]
access-list extended <
list-name
> {deny|permit} {tcp|udp}
<
source
> [eq <
sourceport
>|lt <
sourceport
>|gt <
sourceport
>|ne
<
sourceport
>] <
destination
> [eq <
destport
>|lt <
destport
>|gt
<
destport
>|ne <
destport
>] [log]
no access-list extended <
list-name
> {deny|permit} {tcp|udp}
<
source
> [eq <
sourceport
>|lt <
sourceport
>|gt <
sourceport
>|ne
<
sourceport
>] <
destination
> [eq <
destport
> |lt <
destport
>|gt
<
destport
>|ne <
destport
>][log]
<
type-number
>
The ICMP type, as defined in RFC792 and RFC950. Specify one of
the following integers to create a filter for the ICMP message type:
0
Echo replies.
3
Destination unreachable messages.
4
Source quench messages.
5
Redirect (change route) messages.
8
Echo requests.
11
Time exceeded messages.
12
Parameter problem messages.
13
Timestamp requests.
14
Timestamp replies.
15
Information requests.
16
Information replies.
17
Address mask requests.
18
Address mask replies.
log
Logs the results.
Table 23-2: Parameters in the access-list extended (named) command - icmp
Parameter
Description
Table 23-3: Parameters in the access-list extended (named) command - tcp|udp
Parameter
Description
<
list-name
>
A user-defined name for the access-list.
deny
The access-list rejects packets that match the type, source, and
destination filtering specified with this command.
permit
The access-list permits packets that match the type, source, and
destination filtering specified with this command.
tcp
The access-list matches only TCP packets.
udp
The access-list matches only UDP packets.