Allied Telesis AT-IX5-28GPX, Manual

Page: 901 / 1928

886 Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch C613-50057-01 REV A
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
IP
V
4 S
OFTWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST
(
STANDARD NUMBERED
)
access-list (standard numbered)
Overview This command configures a standard numbered access-list that permits or denies
packets from a specific source IP address. You can either create a standard
numbered ACL together with an ACL filter entry in the Global Configuration mode,
or you can use the IPv4 Standard ACL Configuration mode for sequenced ACL filter
entry after first entering an access-list number.
The no variant of this command removes a specified standard numbered
access-list.
Syntax
[list-number]
access-list {< 1-99 >|< 1300-1999 >}
no access-list {< 1-99 >|< 1300-1999 >}
Syntax [deny|
permit]
access-list {< 1-99 >|< 1300-1999 >} {deny|permit} < source >
no access-list {< 1-99 >|< 1300-1999 >} {deny|permit} <source >
Mode Global Configuration
Default Any traffic controlled by a software ACL that does not explicitly match a filter is
denied.
Usage Use this command when configuring a standard numbered access-list for filtering
IP software packets. For backwards compatibility you can either create the
access-list from within this command, or you can enter this command followed by
Parameter Description
< 1-99 >
IP standard access-list.
< 1300-1999 >
IP standard access-list (expanded range).
Parameter Description
< 1-99 >
IP standard access-list.
< 1300-1999 >
IP standard access-list (expanded range).
deny
Access-list rejects packets from the specified source.
permit
Access-list accepts packets from the specified source.
< source >
The source address of the packets. You can specify a single host, a
subnet, or all sources. The following are the valid formats for
specifying the source:
< ip-addr >
< reverse-mask >
Enter an IPv4 address followed by a reverse
mask in dotted decimal format. For example,
entering
192.168.1.1 0.0.0.255
is
the same as entering
192.168.1.1/24
.
any
Matches any source IP address.