Allied Telesis x510-28GPX, Справочник по командам

Страница: 1521 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1521
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
4 S
OFTWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST EXTENDED
(
NAMED
)
Syntax
[proto|any| ip]
access-list extended < list-name > {deny|permit} {proto
< ip-protocol >|any|ip} {< source >} {< destination >} [log]
no access-list extended < list-name >{deny|permit} {proto
< ip-protocol >|any|ip}{< source >}{< destination >}[log]
ne
Matches port numbers not equal to the port number specified
immediately after this parameter.
log
Log the results.
Table 37-3: Parameters in the access-list extended (named) command - tcp|udp
Parameter Description
Table 37-4: Parameters in the access-list extended (named) command -
proto|ip|any
Parameter Description
< list-name >
A user-defined name for the access-list.
deny
The access-list rejects packets that match the type, source, and
destination filtering specified with this command.
permit
The access-list permits packets that match the type, source, and
destination filtering specified with this command.
proto
Matches only a specified type of IP Protocol.
any
The access-list matches any type of IP packet.
ip
The access-list matches only IP packets.
<source>
The source address of the packets. You can specify a single host, a
subnet, or all sources. The following are the valid formats for
specifying the source:
any
Matches any source IP address.
host <ip-addr>
Matches a single source host with the IP
address given by
<ip-addr> in dotted
decimal notation.
< ip-addr >/
< prefix >
An IPv4 address, followed by a forward
slash, then the prefix length. This matches
any source IP address within the specified
subnet.
< ip-addr >
< reverse-mask >
Alternatively, you can enter a reverse mask
in dotted decimal format. For example,
entering
192.168.1.1 0.0.0.255
is
the same as entering
192.168.1.1/24
.