Dasan V5808 - Extended Access List

UMN:CLI User Manual
V5808
254
[WILDCARD-BITS]
no access-list {<1-99> | <1300-
1999>} {deny | permit} any
no access-list {<1-99> | <1300-
1999>} {deny | permit} host
A.B.C.D
no access-list {<1-99> | <1300-
1999>} remark LINE
Sample Configuration
This is an example of creating the standard ACL entries.
SWITCH(config)# access-list 5 permit 10.55.10.2 0.0.0.255
SWITCH(config)# access-list 5 deny 10.55.1.1 0.0.0.255
SWITCH(config)#
7.21.2 Extended Access List
To create an extended IP address-based access list entry, use the following command.
Command
Mode
Description
access-list {<100-199> | <2000-
2699>} {deny | permit} ip A.B.C.D
WILDCARD-BITS A.B.C.D
WILDCARD-BITS
Global
Specifies a deny or permit statement of the extended
ACL with source/destination addresses and their wild
masks.
100-199: IP extended access list
2000-2699: IP extended access list (extended range)
deny: denies packet if conditions are matched.
permit: permits packet if conditions are matched.
ip: any Internet Protocol
A.B.C.D: source/destination IP address to match
WILDCARD-BITS: bits for use of source/destination IP
address wildcard masking
access-list {<100-199> | <2000-
2699>} {deny | permit} ip host
A.B.C.D A.B.C.D WILDCARD-
BITS
Specifies a deny or permit statement of the extended
ACL with a single source host and other variables.
host: single source host
A.B.C.D: source/destination IP address of a host to
match
WILDCARD-BITS: bits for use of host destination IP
address wildcard masking
Command
Mode
Description
access-list {<100-199> | <2000-
2699>} {deny | permit} ip host
A.B.C.D any
Global
Specifies a deny or permit statement of the extended
ACL with a single source host and other variables.
host: single source host
A.B.C.D: source IP address of a host to match