287
27.18 permit | deny (ip extended)
Command: [no] {deny | permit} icmp {{
<sIpAddr>
<sMask>
} | any-source |
{host-source
<sIpAddr>
}}
{{
<dIpAddr>
<dMask>
}
|
any-destination
|
{host-destination
<dIpAddr>
}} [
<icmp-type>
[
<icmp-code>
]] [precedence
<prec>
]
[tos
<tos>
][time-range
<time-range-name>
]
[no] {deny | permit} igmp {{
<sIpAddr>
<sMask>
} | any-source | {host-source
<sIpAddr>
}} {{
<dIpAddr>
<dMask>
} | any-destination | {host-destination
<dIpAddr>
}}
[
<igmp-type>
] [precedence
<prec>
] [tos
<tos>
][time-range
<time-range-name>
]
[no] {deny | permit} tcp {{
<sIpAddr> <sMask>
} | any-source | {host-source
<sIpAddr>
}} [s-port { <
sPort>
| range
<sPortMin> <sPortMax>
}] {{
<dIpAddr>
<dMask> } | any-destination
|
{host-destination
<dIpAddr>
}} [d-port { <dPort
>
|
range
<dPortMin>
<dPortMax>
}]
[ack+fin+psh+rst+urg+syn] [precedence
<prec>
]
[tos
<tos>
][time-range
<time-range-name>
]
[no] {deny | permit}
udp {{ <sIpAddr>
<sMask>
}
|
any-source | {host-source
<sIpAddr>
}} [s-port {
<sPort
> | range
<sPortMin
>
<sPortMax>
}] {{ <dIpAddr>
<dMask>
} | any-destination
|
{host-destination <dIpAddr> }} [d-port { <
dPort> |
range <
dPortMin> <
dPortMax
>
}] [precedence
<prec>
] [tos
<tos>
][time-range
<time-range-name>
]
[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | ospf | <
protocol-num
>}
{{
<sIpAddr>
<sMask>
} | any-source | {host-source
<sIpAddr>
}} {{
<dIpAddr>
<dMask>
} | any-destination | {host-destination
<dIpAddr>
}} [precedence
<prec>
]
[tos
<tos>
][time-range
<time-range-name>
]
Functions:
Create a name extended IP access rule to match specific IP protocol or all IP
protocol.
Parameters:
<sIpAddr>
is the source IP address, the format is dotted decimal notation;
<
sMask
>
is the reverse mask of source IP, the format is dotted decimal notation;
<dIpAddr>
is the destination IP address, the format is dotted decimal notation;
<
dMask
>
is the reverse mask of destination IP, the format is dotted decimal notation, attentive
position o, ignored position 1;
<
igmp
-
type
>
, the type of igmp, 0-15;
<icmp-type>
, the
type of icmp, 0-255 ;
<icmp-code>,
protocol No. of icmp, 0-255;
<prec>
, IP priority, 0-7;
<tos>
, to value, 0-15;
<sPort>,
source port No., 0-65535;
<sPortMin>,
the down
boundary of source
port; <sPortMax
>, the up boundary of source port;
<dPort>
,
destination port No. 0-65535;
<dPortMin>
,
the down boundary of destination port;
<dPortMax>
, the up boundary of destination port;
<time-range-name>
, time range
name.
Command Mode:
Name extended IP access-list configuration mode
Summary of Contents for S6124
Page 311: ...311 Machine...
Page 314: ...314...
