Command Line Interface
4-88
4
Example
This example configures one permit rule for the specific address 10.1.1.21 and
another rule for the address range 168.92.16.x – 168.92.31.x using a bitmask.
Related Commands
access-list ip (4-86)
permit
,
deny
(Extended ACL)
This command adds a rule to an Extended IP ACL. The rule sets a filter condition for
packets with specific source or destination IP addresses, protocol types, source or
destination protocol ports, or TCP control codes. Use the
no
form to remove a rule.
Syntax
[
no
] {
permit | deny
}
[
protocol
-
number |
udp
]
{
any
|
source address-bitmask |
host
source
}
{
any
|
destination address-bitmask |
host
destination
}
[
precedence
precedence
] [
tos
tos
] [
dscp
dscp
]
[
source-port
sport
[
end
]] [
destination-port
dport
[
end
]]
[
no
] {
permit | deny
}
tcp
{
any
|
source address-bitmask |
host
source
}
{
any
|
destination address-bitmask |
host
destination
}
[
precedence
precedence
] [
tos
tos
] [
dscp
dscp
]
[
source-port
sport
[
end
]] [
destination-port
dport
[
end
]]
[
control-flag
control-flags
flag-bitmask
]
•
protocol-number
– A specific protocol number. (Range: 0-255)
•
source
– Source IP address.
•
destination
– Destination IP address.
•
address-bitmask
– Decimal number representing the address bits to match.
•
host
– Keyword followed by a specific IP address.
• precedence
– IP precedence level. (Range: 0-7)
• tos
– Type of Service level. (Range: 0-15)
•
dscp
– DSCP priority level. (Range: 0-63)
•
sport
– Protocol* source port number. (Range: 0-65535)
•
dport
– Protocol* destination port number. (Range: 0-65535)
•
end
– Upper bound of the protocol port range. (Range: 0-65535)
•
control-flags
– Decimal number (representing a bit string) that specifies flag
bits in byte 14 of the TCP header. (Range: 0-63)
•
flag-bitmask
– Decimal number representing the code bits to match.
(Range: 0-63)
* Includes TCP, UDP or other protocol types.
Console(config-std-acl)#permit host 10.1.1.21
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#
Summary of Contents for 100BASE-TX
Page 2: ......
Page 28: ...Introduction 1 8 1 ...
Page 176: ...Configuring the Switch 3 140 3 ...
Page 366: ...Command Line Interface 4 190 4 ...
Page 370: ...Software Specifications A 4 A ...
Page 383: ......