A
CCESS
C
ONTROL
L
IST
C
OMMANDS
4-123
Related Commands
mask (IP ACL) (4-123)
ip access-group (4-127)
mask
(IP ACL)
This command defines a mask for IP ACLs. This mask defines the fields to
check in the IP header. Use the
no
form to remove a mask.
Syntax
[
no
]
mask
[
protocol
]
{
any
|
host
|
source-bitmask
}
{
any
|
host
|
destination-bitmask
}
[
precedence
] [
tos
] [
dscp
]
[
source-port
[
port-bitmask
]] [
destination-port
[
port-bitmask]
]
[
control-flag
[
flag-bitmask
]]
•
protocol
– Check the protocol field.
•
any
– Any address will be matched.
•
host
– The address must be for a host device, not a subnetwork.
•
source-bitmask
– Source address of rule must match this bitmask.
• destination-bitmask
– Destination address of rule must match this
bitmask.
•
precedence
– Check the IP precedence field.
•
tos
– Check the TOS field.
•
dscp
– Check the DSCP field.
•
source-port
– Check the protocol source port field.
•
destination-port
– Check the protocol destination port field.
• port-bitmask
– Protocol port of rule must match this bitmask.
(Range: 0-65535)
•
control-flag
– Check the field for control flags.
•
flag-bitmask
– Control flags of rule must match this bitmask.
(Range: 0-63)
Default Setting
None
Summary of Contents for 8724ML3 - annexe 1
Page 2: ......
Page 26: ...TABLE OF CONTENTS xxvi ...
Page 64: ...MANAGING SYSTEM FILES 2 18 ...
Page 400: ...CONFIGURING THE SWITCH 3 336 ...
Page 798: ...SOFTWARE SPECIFICATIONS A 6 ...
Page 802: ...TROUBLESHOOTING B 4 ...
Page 812: ...GLOSSARY Glossary 10 ...
Page 818: ...INDEX Index 6 ...
Page 819: ......