![background image](http://html1.mh-extra.com/html/smc-networks/6726al2-fiche/6726al2-fiche_management-manual_1300177362.webp)
C
OMMAND
L
INE
I
NTERFACE
4-122
permit
,
deny
(Extended ACL)
This command adds a rule to an Extended IP ACL. The rule sets a filter
condition for packets with specific source or destination IP addresses,
protocol types, source or destination protocol ports, or TCP control codes.
Use the
no
form to remove a rule.
Syntax
[
no
] {
permit | deny
}
[
protocol
-
number |
udp
]
{
any
|
source address-bitmask |
host
source
}
{
any
|
destination address-bitmask |
host
destination
}
[
precedence
precedence
] [
tos
tos
] [
dscp
dscp
]
[
source-port
sport
[
end
]] [
destination-port
dport
[
end
]]
[
no
] {
permit | deny
}
tcp
{
any
|
source address-bitmask |
host
source
}
{
any
|
destination address-bitmask |
host
destination
}
[
precedence
precedence
] [
tos
tos
] [
dscp
dscp
]
[
source-port
sport
[
end
]] [
destination-port
dport
[
end
]]
[
control-flag
control-flags
flag-bitmask
]
•
protocol-number
– A specific protocol number. (Range: 0-255)
•
source
– Source IP address.
•
destination
– Destination IP address.
•
address-bitmask
– Decimal number representing the address bits to
match.
•
host
– Keyword followed by a specific IP address.
•
precedenc
e
– IP precedence level. (Range: 0-7)
•
tos
– Type of Service level. (Range: 0-15)
•
dscp
– DSCP priority level. (Range: 0-63)
•
sport
– Protocol
17
source port number. (Range: 0-65535)
•
dport
– Protocol
17
destination port number. (Range: 0-65535)
•
end
– Upper bound of the protocol port range. (Range: 0-65535)
•
control-flags
– Decimal number (representing a bit string) that
specifies flag bits in byte 14 of the TCP header. (Range: 0-63)
•
flag-bitmask
– Decimal number representing the code bits to match.
(Range: 0-63)
17. Includes TCP, UDP or other protocol types.
Summary of Contents for 6726AL2 FICHE
Page 2: ......
Page 20: ...CONTENTS xvi ...
Page 24: ...TABLES xx ...
Page 28: ...FIGURES xxiv ...
Page 38: ...INTRODUCTION 1 10 ...
Page 240: ...CONFIGURING THE SWITCH 3 190 ...
Page 502: ...TROUBLESHOOTING B 4 ...
Page 515: ......