Avaya X330W-2DS1, Руководство пользователя, Страница: 124 / 176

Chapter 7 X330WAN CLI Commands
102 Avaya X330W-2DS1 User’s Guide
out
ip access-list
Use the
ip access-list
command to create a specific policy rule. This
command defines a policy rule. The access list contains several of these rules. Each
rule pertains to the source IP address, the destination IP address, the protocol, the
protocol ports (tcp/udp if relevant), and to the ACK bit (in TCP protocol). To delete
a specific rule, use the
no
form of this command.
The syntax for this command for the X330WAN is:
[no] ip access-list <policy-list-number> <access-list-index>
<action> <protocol> {<source-ip>
<source-wildcard>|any|host
<source-ip>} [<operator> <port> [<port]]
{<destination-ip> <destination-
wildcard>|any|host
<destination-ip>}[<operator> <port>
[<port>]][established] [precedence]
access-list-number An integer (100..149)
policy-list-number An integer (100..149)
access-list-index An integer (1...9999)
command permit|deny|deny-and-notify|fwd0-7
action permit|deny|deny-and-notify|fwd0-7|
composite op name
protocol ip|tcp|udp|integer (1..255)
source-ip IP network
source-wildcard IP network wildcard
operator eq|lt|gt|range
port An integer (1..65535)
destination-ip IP network
destination-wildcard IP network wildcard
precedence mandatory|optional