Related
Commands
deny tcp
— assigns a filter to deny TCP packets.
deny udp
— assigns a filter to deny UDP packets.
ip access-list extended
— creates an extended ACL.
seq
Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
Syntax
seq
sequence-number
{deny | permit} {source [
mask
] | any | host
ip-address
}} [count [byte] [dscp
value
] [order] [fragments]
[log [interval
minutes
] [threshold-in-msgs [
count
] [monitor]
Parameters
sequence-
number
Enter a number from 0 to 4294967290. The range is from 0
to 65534.
deny
Enter the keyword
deny
to configure a filter to drop packets
meeting this condition.
permit
Enter the keyword
permit
to configure a filter to forward
packets meeting this criteria.
source
Enter an IP address in dotted decimal format of the network
from which the packet was received.
mask
(OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D. The mask, when specified in A.B.C.D format, may be
either contiguous or non-contiguous.
any
Enter the keyword
any
to specify that all routes are subject
to the filter.
count
(OPTIONAL) Enter the keyword
count
to count packets the
filter processes.
byte
(OPTIONAL) Enter the keyword
byte
to count bytes the filter
processes.
dscp
(OPTIONAL) Enter the keyword
dcsp
to match to the IP
DCSCP values.
order
(OPTIONAL) Enter the keyword
order
to specify the QoS
order for the ACL entry. The range is from 0 to 254 (where 0
is the highest priority and 254 is the lowest; lower-order
numbers have a higher priority). If you do not use the
keyword
order
, the ACLs have the lowest order by default
(
255
).
fragments
Enter the keyword
fragments
to use ACLs to control packet
fragments.
Access Control Lists (ACL)
215
