Dell PowerConnect 55xx Systems User Guide
121
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Maintenance Projects\Dell
Contax\sources\CxU_Switching_NetworkSecurity.fm
D E L L CO N F I D E N T I A L – P R E L I MI N A RY 10 / 3 0 /1 3 - FO R PR O O F O N LY
–
Shutdown
— Drops packet that meet the ACL criteria, and disables
the port to which the packet was addressed.
–
Logging of Dropped Packets
— Check to activate logging of dropped
packets.
Configuring IP-based ACEs Using CLI Commands
The following table summarizes the CLI commands for configuring IP-based
ACLs
.
Table 8-7. IP-Based ACE CLI Commands
CLI Command
Description
permit protocol
{
any
|{
source-prefix
/
length
}{
any
|
destination- prefix
/
length
} [
dscp
number
|
precedence number
] [
time-range
time-range-name
]
permit icmp
{
any
|{
source-prefix
/
length
}{
any
|
destination
-
prefix
/
length
}
{
any
|
icmp-type
}{
any
|
icmp-code
} [
dscp
number
|
precedence
number
] [
time-range
time-range-name
]
permit tcp
{
any
|{
source-prefix
/
length
}
{
any
|
source-port
/
port-range
}
}{
any
|
destination prefix
/
length
}
{
any
|
destination-port
/
port-range
} [
dscp
number
|
precedence
number] [
match-all
list-
of-flags
] [
time-range
time-range-name
]
permit udp
{
any
|{
source-prefix
/
length
}}
{
any
|
source
-
port|port
-
range
}
}{
any
|
destination
prefix
/
length
}
{
any
|
destination-port
/
port-range
} [
dscp
number
|
precedence
number
] [
time-range
time-range-name
]
Sets permit conditions
for IPv6 access list.
