Dell POWERCONNECT 5524P - Page 111

Dell PowerConnect 55xx Systems User Guide 111
The following is an example of some of the CLI commands:
deny protocol {any|source-ip-address
source-wildcard} {any|destination-ip-
address destination-wildcard} [dscp
number|precedence number] [time-range
time-range-name] [disable-port|log-input]
deny icmp {any|source-ip-address source-
wildcard} {any|destination-ip-address
destination-wildcard{any|icmp-type}
{any|icmp-code} [dscp number|precedence
number] [time-range time-range-name]
[disable-port|log-input]
deny igmp {any|source-ip-address source-
wildcard} {any|destination-ip-address
destination-wildcard}[igmp-type] [dscp
number|precedence number] [time-range
time-range-name] [disable-port|log-input]
deny tcp {any|source-ip-address source-
wildcard} {any|source-port|port-
range}{any|de
stination-ip-address
destination-wildcard} {any|destination-
port/port-range } [dscp number|precedence
number] [match-all list-of-flags] [time-
range time-range-name] [disable-port|log-
input]
deny udp {any|source-ip-address source-
wildcard} {any|source-port|port-range}
{any|destination-ip-address destination-
wildcard} {any|destination-port|port-range
} [dscp number|precedence number] [match-
all time-range-name] [time-range time-
range-name] [disable-port|log-input]
Sets deny conditions
for IPv4 access list (in
access list
configuration mode).
console(config)# ip access-list extended server
console(config-ip-al)# permit ip 1.1.1.0 0.0.0.255
1.1.2.0 0.0.0.0
Table 8-5. IP-Based ACE CLI Commands (Continued)
CLI Command Description