DGS-6604 m permit | deny (ip access-list)
CLI Reference Guide
473
permit | deny (ip access-list)
Use the permit command to define the rule for packets to be access based on
their IP header information. Use the no permit command to remove a permit
entry. Use the deny command to add a deny entry. Use the no deny command
to remove a deny entry.
{permit | deny} tcp {any | host SRC-IP-ADDR | SRC-IP-ADDR MASK} [OPERATOR PORT] {any
| host DST-IP-ADDR | DST-IP-ADDR MASK} [OPERATOR PORT] [precedence PRECEDENCE |
tos TOS |dscp DSCP] [time-range PROFILE-NAME] [priority PRIORITY]
{permit | deny} udp {any | host SRC-IP-ADDR | SRC-IP-ADDR MASK} [OPERATOR PORT] {any
| host DST-IP-ADDR | DST-IP-ADDR MASK} [OPERATOR PORT] [precedence PRECEDENCE |
tos TOS |dscp DSCP] [time-range PROFILE-NAME] [priority PRIORITY]
{permit | deny} [gre | esp | eigrp | icmp | igmp | ospf | pim | vrrp | protocol-id PROTOCOL-ID]
{any | host SRC-IP-ADDR | SRC-IP-ADDR MASK} {any | host DST-IP-ADDR | DST-IP-ADDR
MASK} [precedence PRECEDENCE | tos TOS | dscp DSCP] [time-range PROFILE-NAME]
[priority PRIORITY]
no {permit | deny} tcp {any | host SRC-IP-ADDR | SRC-IP-ADDR MASK} [OPERATOR PORT]
{any | host DST-IP-ADDR | DST-IP-ADDR MASK} [OPERATOR PORT
] [precedence
PRECEDENCE | tos TOS | dscp DSCP] [time-range]
no {permit | deny} udp {any | host SRC-IP-ADDR | SRC-IP-ADDR MASK} [OPERATOR PORT]
{any | host DST-IP-ADDR | DST-IP-ADDR MASK} [OPERATOR PORT] [precedence
PRECEDENCE | tos TOS | dscp DSCP] [time-range]
no {permit | deny} [gre | esp | eigrp | icmp | igmp | ospf | pim | vrrp | protocol-id PROTOCOL-
ID] {any | host SRC-IP-ADDR | SRC-IP-ADDR MASK} {any | host DST-IP-ADDR | DST-IP-ADDR
MASK} [precedence PRECEDENCE | tos TOS | dscp DSCP] [time-range]
Syntax Description
any Means any source IP address or any destination IP address.
host SRC-IP-ADDR Specifies a specific source IP address.
SRC-IP-ADDR MASK Specifies a group of source IP addresses by using mask.
host DST-IP-ADDR Specifies a specific destination IP address.
DST-IP-ADDR MASK Specifies a group of destination IP addresses by using mask.
precedence
PRECEDENCE
(Optional) Packets can be filtered by precedence level, as specified by a
number from 0 to 7.
dscp DSCP (Optional) Specifies the Differentiated Services Control pointer (DSCP)
value, as specified by a number from 0 to 63.
tos TOS (Optional) Packets can be filtered by the type of service level, as specified
by a number from 0 to 255.
To Next Page
Loading...
