Avaya G430 - Page 571

Use the no form of the appropriate command to specify that the rule does not apply to
the IP address or addresses defined by the command.
Example
The following command specifies a source IP address of 10.10.10.20 for rule 1 in access
control list 301:
Gxxx-001(ACL 301/ip rule 1)# source-ip host 10.10.10.20
The following command allows any destination IP address for rule 3 in QoS list 404:
Gxxx-001(QoS 404/rule 3)# destination-ip any
The following command specifies a source IP address in the range 10.10.0.0 through
10.10.255.255 for rule 1 in access control list 301:
Gxxx-001(ACL 301/ip rule 1)# source-ip 10.10.0.0 0.0.255.255
The following command specifies a source IP address outside the range 64.236.24.0 through
64.236.24.255 for rule 7 in access control list 308:
Gxxx-001(ACL 308/ip rule 7)# no source-ip 64.236.24.0 0.0.0.255
The following command specifies a source IP address in the range 64.<any>.24.<any> for rule
6 in access control list 350:
Gxxx-001(ACL 350/ip rule 6)# source-ip 64.*.24.*
Specifying source and destination port range
Procedure
1. To specify a range of source and destination ports to which the rule applies, use
any of the following commands followed by either port name or port number range
criteria:
•
tcp source-port
•
tcp destination-port
•
udp source-port
•
udp destination-port
This command also sets the IP protocol parameter to TCP or UDP.
For more information about these commands, see
Summary of access control list
commands on page 581, Summary of QoS list commands on page 583, or
Avaya CLI Reference.
2. Select the port name or number range criteria using one of the following options:
• To set a range of port numbers to which the rule applies, type range, followed
by two port numbers.
• To set a port name or port number to which the rule applies, type eq (equal)
followed by a port name or number.
Policy lists
Administering Avaya G430 Branch Gateway October 2013 571