122
Dell PowerConnect 55xx Systems User Guide
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Maintenance Projects\Dell
Contax\sources\CxU_Switching_NetworkSecurity.fm
D E LL C O N F ID E N T IA L – P R E L I M I N A RY 1 0 / 3 0/ 1 3 - F O R P R O O F O N LY
The following is an example of some of the CLI commands:
deny protocol
{
any
|{
source-prefix
/
length
}{
any
|
destination-prefix|length
} [
dscp
number
|
precedence
number
] [
time-range
time-range-name
] [
disable-port
|
log-input
]
deny icmp
{
any
|{
source-prefix
/
length
}{
any
|
destination-prefix/length
}
{
any
|
icmp-type
} {
any
|icmp-code} [
dscp
number
|
precedence
number
] [
time-range
time-range-name] [
disable-port
|
log-input
]
deny tcp
{
any
|{
source-prefix
/
length
}
{
any
|
source-port
/
port-range
}
}{
any
|
destination-prefix/length
}
{
any
|
destination-port
/
port-range
} [
dscp
number
|
precedence
number
] [
match-all
list-
of-flags
] [
time-range
time-range-name]
[
disable-port
|
log-input
]
deny udp
{
any
|{
source-prefix
/
length
}}
{
any
|source-port/port-range}
}{
any
|
destination-prefix
|
length
}
{
any
|
destination-port
/
port-range
} [
dscp
number
|
precedence
number
] [
time-range
time-range-name
] [
disable-port
|
log-input
]
Sets deny conditions
for IPv4 access list (in
Access List
Configuration mode).
console(config)#
ipv6 access-list
server
console(config-ipv6-al)#
permit tcp
3001::2/64
any
any
80
Table 8-7. IP-Based ACE CLI Commands (Continued)
CLI Command
Description
