S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
11-43
Cisco MDS 9000 Family Command Reference
OL-18089-01, Cisco MDS NX-OS Release 4.x
Chapter 11 I Commands
ip access-list
ip access-list
To
configure IP access control lists (ACLs),
use the
ip access-list
command in configuration mode. To
negate a previously issued command or revert to factory defaults, use the
no
form of the command.
ip access-list
list-name
{
deny
|
permit
}
ip-protocol
{
src-addr
src-wildcard
}
{
dest-addr
dest-wildcard
|
operator port-value
}
[
operator
port
port-value]
[
established
|
icmp-type
icmp-value
]
[
tos
tos-value
]
[
log-deny
]
Syntax Description
list-name
Configures an access list with this name.The maximum length is 64
characters.
deny
Denies access if the conditions match.
permit
Allows access if the conditions match.
ip-protocol
Specifies the name or number (integer range from 0 to 255) of an IP protocol.
The IP protocol name can be
icmp
,
ip
,
tcp
, or
udp
.
src-addr
Specifies the network from which the packet is sent. There are two ways to
specify the source:
•
A 32-bit quantity in four-part, dotted-decimal format
•
A keyword
any
as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
src-wildcard
Applies the wildcard bits to the source.
Each wildcard bit set to zero indicates that the corresponding bit position in
the packet’s IP address must exactly match the bit value in the corresponding
position of the packet’s ip address or it will not be considered a match to this
access list. There are two ways to specify the destination wildcard:
•
A 32-bit quantity in four-part, dotted-decimal format
•
A keyword
any
as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
dest-addr
Specifies the network from which the packet is sent. There are two ways to
specify the destination:
•
A 32-bit quantity in four-part, dotted-decimal format
•
A keyword
any
as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
dest-wildcard
Applies the wildcard bits to the destination. There are two ways to specify
the destination wildcard:
•
A 32-bit quantity in four-part, dotted-decimal format
•
A keyword
any
as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
