ACL Commands
113 OL-32830-01 Command Line Interface Reference Guide
4
[log-input]
no permit
igmp {any | source source-wildcard} {any | destination
destination-wildcard}[igmp-type] [dscp number | precedence number] [
time-range
time-range-name]
[log-input]
no permit tcp
{any | source source-wildcard} {any|source-port/port-range}{any |
destination destination-wildcard} {any|destination-port/port-range} [dscp number |
precedence number] [match-all list-of-flags] [
time-range
time-range-name]
[log-input]
no permit udp
{any | source source-wildcard} {any|source-port/port-range} {any |
destination destination-wildcard} {any|destination-port/port-range} [dscp number |
precedence number] [
time-range
time-range-name]
[log-input]
Parameters
• permit
protocol
—The name or the number of an IP protocol. Available
protocol names are: icmp, igmp, ip, tcp, egp, igp, udp, hmp, rdp, idpr, ipv6,
ipv6:rout, ipv6:frag, idrp, rsvp, gre, esp, ah, ipv6:icmp, eigrp, ospf, ipinip, pim,
l2tp, isis. To match any protocol, use the ip keyword.(Range: 0–255)
•
source
—Source IP address of the packet.
•
source-wildcard
—Wildcard bits to be applied to the source IP address. Use
ones in the bit position that you want to be ignored.
•
destination
—Destination IP address of the packet.
•
destination-wildcard
—Wildcard bits to be applied to the destination IP
address. Use ones in the bit position that you want to be ignored.
•
priority
- Specify the priority of the access control entry (ACE) in the access
control list (ACL). "1" value represents the highest priority and "2147483647"
number represents the lowest priority.(Range: 1-2147483647)
• dscp
number
—Specifies the DSCP value.
• precedence
number
—Specifies the IP precedence value.
•
icmp-type
—Specifies an ICMP message type for filtering ICMP packets.
Enter a number or one of the following values: echo-reply,
destination-unreachable, source-quench, redirect, alternate-host-address,
echo-request, router-advertisement, router-solicitation, time-exceeded,
parameter-problem, timestamp, timestamp-reply, information-request,