Extreme Networks ExtremeWare 7.7, Справочник по командам

Страница: 968 / 2620

968 ExtremeWare 7.7 Command Reference Guide
Security Commands
create access-list udp destination source ports
create access-list <name> udp destination [<dest_ipaddress>/<mask> | any]
ip-port [<dst_port> | range <dst_port_min> <dst_port_max> | any]
source [<src_ipaddress>/<src_mask> | any] ip-port [<src_port> | range
<src_port_min> <src_port_max> | any] [permit <qosprofile> | deny] ports
[<portlist> | any] {precedence <prec_number>}
Description
Creates a named IP access list that applies to UDP traffic.
NOTE
This command is available only on the “i” series switches. To create an access list for an “e” series
switch, use the
create access-list
command.
Syntax Description
Default
N/A
name Specifies the access list name. The access list name can be between 1 and
31 characters.
dest_ipaddress/mask Specifies an IP destination address and subnet mask. A mask length of 32 indicates
a host entry.
any
specifies that any address will match.
dst_port Specifies a UDP layer 4 port.
any
specifies that all UDP ports will match.
dst_port_min Specifies the beginning of a UDP layer 4 port range.
dst_port_max Specifies the end of a UDP layer 4 port range.
src_ipaddress/src_mask Specifies a source IP address and subnet mask.
any
specifies that any address will match.
src_port Specifies a UDP layer 4 port.
any
specifies that all UDP ports will match.
src_port_min Specifies the beginning of a UDP layer 4 port range.
src_port_max Specifies the end of a UDP layer 4 port range.
permit Specifies that packets that match the access list description are permitted to be
forward by this switch.
qosprofile Specifies an optional QoS profile can be assigned to the access list, so that the
switch can prioritize packets accordingly.
deny Specifies that packets that match the access list description are filtered (dropped) by
the switch.
portlist Specifies the ingress port(s) on which this rule is applied.
any specifies that the rule will be applied to all ports.
prec_number Specifies the access list precedence number. The range is 1 to 25,600.