Extreme Networks ExtremeWare 7.5, Command Reference Manual

Page: 931 / 2546

create access-list
ExtremeWare 7.5 Command Reference Guide 931
create access-list
create access-list <name> access-mask <access-mask name> {dest-mac
<dest_mac} {source-mac <src_mac>} {vlan <name>} {ethertype [IP | ARP |
<hex_value>]} {tos <ip_precedence> | code-point <code_point>} {ipprotocol
[tcp | udp | icmp | igmp | <prococol_num>]} {dest-ip <dest_IP>/<mask
length>} {dest-L4port <dest_port>} {source-ip <src_IP>/<mask length>}
{source-L4port <src_port> [permit {qosprofile <qosprofile>} {set code-point
<code_point>} {set dot1p <dot1p_value} | permit-established |
deny]{vlan-pri}{vlan-pri-2bits}
Description
Creates an access list on an “e” series switch.
NOTE
This command is available only on the “e” series switches. To create access lists for “i” series switches,
use the following four commands:
create access-list icmp destination source
create access-list ip destination source ports
create access-list tcp destination source ports
create access-list udp destination source ports
Syntax Description
name Specifies the name of the access list.
access-mask Specifies the name of the associated access mask.
dest-mac Specifies the destination MAC address.
source-mac Specifies the source MAC address.
vlan Specifies the VLANid.
ethertype Specifies the Ethernet type field.
tos Specifies a 3-bit precedence field within the IP ToS field. Valid entries are from 0 to 7.
code-point Specifies a 6-bit DiffServ code point. Valid entries are from 0 to 63.
iprotocol Specifies the IP protocol.
dest-ip Specifies the destination IP address.
source-ip Specifies the source IP address.
dest-L4port Specifies the destination TCP/UDP port.
source-L4port Specifies the source TCP/UDP port.
icmp-type Specifies the ICMP type.
icmp-code Specifies the ICMP code.
egressport Specifies the egress port.
ports Specifies one or more ingress ports.
permit Specifies to forward the packet.
qosprofile Specifies the priorities for using QoS profiles.