C613-50631-01 Rev A Command Reference for IE340 Series 1967
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(ACL-GROUP IP PORT RANGE)
(acl-group ip port range)
Overview Use this command to add one or more protocol port rules on a port ACL group.
These port matching rules are used to simplify large ACL configs where many ACLs
block or permit on the same service ports.
Use the no variant of this command to remove a rule match on protocol ports.
Syntax
eq <0-65535>
lt <0-65535>
gt <0-65535>
ne <0-65535>
range <0-65535> <0-65535>
no eq <0-65535>
no lt <0-65535>
no gt <0-65535>
no ne <0-65535>
no range <0-65535> <0-65535>
Default The port ACL group will match on all ports by default.
Mode IP ACL Port Group Configuration
Example To add the rule match on protocol ports equal to 20 on a port ACL group, use the
commands:
awplus# configure terminal
awplus(config)# acl-group ip port PORT_GROUP1
awplus(config-ip-port-group)# eq 20
Parameter Description
eq The protocol port matches if equal to this number.
lt The protocol port matches if less than this number.
gt The protocol port matches if greater than this number.
ne The protocol port matches if not equal to this number.
range The protocol port matches if it is in this range.
<0-65535> The port number.