Ruckus Wireless ZoneSwitch 4124, User Manual

Page: 321 / 410

307
Command Line Interface
ACL Commands
permit
Enables and disables permit rules in access lists.
Command Mode: ACL Configuration
Syntax
[no] permit {any|<src_mac>} {any|<dst_mac>} {any|<src_ip/mask>}
{any|<dst_ip/mask>} [protocol <protocol_number>] [src_port <port_no>]
[dst_port <port_no>]
Description
■
{any|<src_mac>}
- Sets the source MAC address.
■
{any|<dst_mac>}
- Sets the destination MAC address.
■
{any|<src_ip/mask>}
- Sets the source IP address and mask.
■
{any|<dst_ip/mask>}
- Sets the destination IP address and mask.
■
[protocol <protocol_no>]
- Sets the IP protocol number.
■
[src_port <port_no>]
- Sets the source TCP/UDP port number.
■
[dsc_port <port_no>]
- Sets the destination TCP/UDP port number.
■
no deny
- Disables ACL permit rules.
Example
!Enables ACL permit rules with source IP and destination IP.
Switch(config)# access-list list1
Switch(config-access)# permit any any 192.168.1.2/24 192.168.1.7/24
Switch(config-access)#
deny
any any any any
Switch(config-access)#
exit
Switch(config)#
!Creates a permit rule on protocol number 12 in list3.
Switch(config)#
access-list
list3
Switch(config-access)# permit any any any any protocol 12
Switch(config-access)# deny any any any any
Switch(config-access)#
exit
Switch(config)#
!Revmoves a permit rule from list1
Switch(config)#
access-list
list1
Switch(config-access)#
no permit
any any 192.168.1.3/24 192.168.1.7/24
Switch(config-access)# exit
Switch(config)#