Send documentation comments to mdsfeedback-doc@cisco.com
11-40
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 11 I Commands
ip access-list
ip access-list
To configure IP access control lists (ACLs), use the ip access-list command in configuration mode. To
negate a previously issued command or revert to factory defaults, use the no form of the command.
ip access-list list-name {deny | permit} ip-protocol
{src-addr src-wildcard}
{dest-addr dest-wildcard | operator port-value}
[operator port port-value]
[established | icmp-type icmp-value]
[tos tos-value]
[log-deny]
Syntax Description list-name Configures an access list with this name.The maximum length is 64
characters.
deny Denies access if the conditions match.
permit Allows access if the conditions match.
ip-protocol Specifies the name or number (integer range from 0 to 255) of an IP protocol.
The IP protocol name can be icmp, ip, tcp, or udp.
src-addr Specifies the network from which the packet is sent. There are two ways to
specify the source:
• A 32-bit quantity in four-part, dotted-decimal format
• A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
src-wildcard Applies the wildcard bits to the source.
Each wildcard bit set to zero indicates that the corresponding bit position in
the packet’s IP address must exactly match the bit value in the corresponding
position of the packet’s ip address or it will not be considered a match to this
access list. There are two ways to specify the destination wildcard:
• A 32-bit quantity in four-part, dotted-decimal format
• A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
dest-addr Specifies the network from which the packet is sent. There are two ways to
specify the destination:
• A 32-bit quantity in four-part, dotted-decimal format
• A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
dest-wildcard Applies the wildcard bits to the destination. There are two ways to specify
the destination wildcard:
• A 32-bit quantity in four-part, dotted-decimal format
• A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
To Next Page
Loading...
Need help?
General
