Dell Force10 TeraScale C Series, Справочное руководство

Страница: 248 / 1640

248 | Access Control Lists (ACL)
www.dell.com | support.dell.com
seq
c e s
Assign a sequence number to a deny or permit filter in an extended IP access list while creating the
filter.
Syntax seq sequence-number { deny | permit } { ip-protocol-number | icmp | ip | tcp | udp }
{ source mask | any | host ip-address } { destination mask | any | host ip-address } [ operator
port [ port ]] [ count [ byte ] | log ] [ dscp value ] [ order ] [ monitor ] [fragments]
Parameters
sequence-number
Enter a number from 0 to 4294967290.
deny
Enter the keyword
deny
to configure a filter to drop packets meeting this condition.
permit
Enter the keyword
permit
to configure a filter to forward packets meeting this
criteria.
ip-protocol-number Enter a number from 0 to 255 to filter based on the protocol identified in the IP
protocol header.
icmp
Enter the keyword
icmp
to configure an ICMP access list filter.
ip
Enter the keyword
ip
to configure a generic IP access list. The keyword
ip
specifies
that the access list will permit all IP protocols.
tcp
Enter the keyword
tcp
to configure a TCP access list filter.
udp
Enter the keyword
udp
to configure a UDP access list filter.
source
Enter the IP address of the network or host from which the packets were sent.
mask
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
any
Enter the keyword
any
to specify that all routes are subject to the filter.
host ip-address
Enter the keyword
host
followed by the IP address to specify a host IP address.
operator
(OPTIONAL) Enter one of the following logical operands:
•
eq
= equal to
•
neq
= not equal to
•
gt
= greater than
•
lt
= less than
•
range
= inclusive range of ports (you must specify two ports for the
port
parameter.)
port port (OPTIONAL) Enter the application layer port number. Enter two port numbers if
using the
range
logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
destination Enter the IP address of the network or host to which the packets are sent.
message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if
necessary) numbers or with the name of the message type (ICMP message types are
listed in
Table 9-2 ).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
count
(OPTIONAL) Enter the keyword
count
to count packets processed by the filter.
byte
(OPTIONAL) Enter the keyword
byte
to count bytes processed by the filter.