Enterasys G3G170-24, Cli Reference Manual

Page: 673 / 679

access-list (standard)
Enterasys G-Series CLI Reference 20-71
Mode
Any router mode.
Example
This example shows how to display IP access list number 101. This is an extended access list,
which permits or denies ICMP, UDP and IP frames based on restrictions configured with the one
of the access ‐ list commands. For details on configuring standard access lists, refer to “ access ‐ list
(standard) ” on page 20 ‐ 71. For details on configuring extended access lists, refer to “ access ‐ list
(extended) ” on page 20 ‐ 72
.
G3(su)->router#show access-lists 101
Extended IP access list 101
1: permit icmp host 18.2.32.130 any
2: permit udp host 198.92.32.130 host 171.68.225.126
3: deny ip 150.136.0.0 0.0.255.255 224.0.0.0 15.255.255.255
4: deny ip 11.6.0.0 0.1.255.255 224.0.0.0 15.255.255.255
5: deny ip 172.24.24.0 0.0.1.255 224.0.0.0 15.255.255.255
access-list (standard)
Use this command to define a standard IP access list by number when operating in router mode.
The no form of this command removes the defined access list or entry.
Syntax
To create an ACL entry:
access-list access-list-number { deny | permit } source [ source-wildcard ]
no access-list access-list-number [ entry ]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [ source2 ]
Parameters
access ‐ list ‐
number
Specifies a standard access list number. Valid values are from 1 to 99.
deny | permit Denies or permits access if specified conditions are met.
source Specifies the network or host from which the packet will be sent. Valid
options for expressing source are:
• IP address or range of addresses (A.B.C.D)
• any ‐ Any source host
• host source ‐ IP address of a single source host
source ‐ wildcard (Optional) Specifies the bits to ignore in the source address.
insert | replace
entry
(Optional) Inserts this new entry before a specified entry in an existing ACL,
or replaces a specified entry with this new entry.