279
Usage Guide:
When the user assign specific
<num>
for the first time, ACL of the serial
number is created, then the lists are added into this ACL.
Examples:
Permit tagged-eth2 with any source MAC addresses and any destination MAC
addresses and the packets pass.
Switch(config)#access-list 1100 permit any-source-mac any-destination-mac tagged-eth2
27.6 access-list(mac-ip extended)
Command:
access-list
<num>
{deny|permit}{any-source-mac|
{host-source-mac
<host_smac>
}|{
<smac><smac-mask>
}}
{any-destination-mac|{host-destination-mac
<host_dmac>
}|{
<dmac><dmac-mask>
}}icmp
{{
<source><source-wildcard>
}|any-source|{host-source
<source-host-ip>
}}
{{
<destination><destination-wildcard>
}|any-destination|
{host-destination
<destination-host-ip>
}}[
<icmp-type>
[
<icmp-code>
]] [precedence
<precedence>
] [tos
<tos>
][time-range
<time-range-name>
]
access-list
<num>
{deny|permit}{any-source-mac|
{host-source-mac
<host_smac>
}|{
<smac><smac-mask>
}}
{any-destination-mac|{host-destination-mac
<host_dmac>
}|{
<dmac><dmac-mask>
}}igmp
{{
<source><source-wildcard>
}|any-source|{host-source
<source-host-ip>
}}
{{
<destination><destination-wildcard>
}|any-destination|
{host-destination
<destination-host-ip>
}} [
<igmp-type>
] [precedence
<precedence>
]
[tos
<tos>
][time-range
<time-range-name>
]
access-list
<num>
{deny|permit}{any-source-mac|
{host-source-mac
<host_smac>
}|{
<smac>
<smac-mask>
}}{any-destination-mac|
{host-destination-mac
<host_dmac>
}|{
<dmac> <dmac-mask>
}}tcp {{
<source>
<source-wildcard>
}|any-source| {host-source
<source-host-ip>
}}[s-port{
<port1
> |
range
<sPortMin> <sPortMax>
}] {
{ <
destination> <
destination-wildcard>
} |
any-destination | {host-destination
<
destination-host-ip> }} [d-port { <
port3
> |
range
<
dPortMin
>
<dPortMax
>
}]
[ack+fin+psh+rst+urg+syn]
[precedence
<precedence>
] [tos
<tos>
] [time-range
<time-range-name>
]
access-list
<num>
{deny|permit}{any-source-mac|
{host-source-mac
<host_smac>
}|{
<smac>
<smac-mask>
}}{any-destination-mac|
{host-destination-mac
<host_dmac>
}|{
<dmac> <dmac-mask>
}}udp {{
<source>
Summary of Contents for S6124
Page 311: ...311 Machine...
Page 314: ...314...
