Destination network address.
destination
(Optional) Matches only packets on a given port
number.
eq
(Optional) Matches only packets with a greater port
number.
gt
(Optional) Matches only packets with a lower port
number.
lt
(Optional) Matches only packets not on a given port
number.
neq
(Optional) Specifies the source port group.portgroup
(Optional) Matches only packets in the range of port
numbers.
range
Specifies a capture session for the ACEs.capture session
Session ID. The range is from 1 to 48.
session
Command Default
None
Command Modes
ACL configuration mode
Command History
ModificationRelease
This command was introduced.5.2(1)
Usage Guidelines
This command does not require a license.
Examples
This example shows how to enable a capture session for the access control entries (ACEs) of the access control
list:
switch# configure terminal
switch(config)# ip access-list acl-1
switch(config-acl)# permit tcp host 10.1.1.1 any capture session 10
switch(config-acl)#
Cisco Nexus 7000 Series Security Command Reference
535
P Commands
permit (ACL)