Example:
Stateful Access List 5000>entry 3 deny
Stateful Access List 5000>
2.6.3.10 ENTRY <id> DENY
Identifies the entry as deny. Therefore, all traffic that meets the register selection parameters will NOT pass through
the access list. Since this command is an
action
indicator, it determines the function of the entry sentences.
Syntax:
Stateful Access List #>entry <id> deny
Example:
Stateful Access List 5000>entry 3 deny
Stateful Access List 5000>
2.6.3.11 ENTRY <id> DESCRIPTION
Adds a text description on an entry to better understand its purpose (or for later use).
Syntax:
Stateful Access List #>entry <id> description <description>
Example:
Stateful Access List 5000>entry 1 description “Access list number 5000”
Stateful Access List 5000>
2.6.3.12 ENTRY <id> DESTINATION ADDRESS
Selects a packet depending on its destination IP. You can specify an IP or a network (mask is optional). If you don’t
specify the mask, this is assumed to be the host mask. This also allows you to select the destination address through
range.
Syntax:
Stateful Access List #>entry <id> destination address <ip> [mask <mask>]
Stateful Access List #>entry <id> destination address [range] <iplow> <iphigh>
Example:
Stateful Access List 5000>entry 1 destination address 1.1.1.0 mask 255.255.255.0
Stateful Access List 5000>
2.6.3.13 ENTRY <id> DESTINATION TCP PORT
Specifies a port or a range of TCP destination ports. The packet must be TCP to match this criterion.
Syntax:
Stateful Access List #>entry <id> destination tcp port <low-port> <high-port>
Example:
Stateful Access List 5000>entry 1 destination address tcp port 20000 21000
Stateful Access List 5000>
2.6.3.14 ENTRY <id> DESTINATION UDP PORT
Specifies a port or a range of UDP destination ports. The packet must be UDP to match this criterion.
Syntax:
Stateful Access List #>entry <id> destination udp port <low-port> <high-port>
Example:
Stateful Access List 5000>entry 1 destination address udp port 20000 21000
Stateful Access List 5000>
bintec elmeg
2 Configuration
Access Control
27
