Dell POWERCONNECT 5548P - Page 117

116 Dell PowerConnect 55xx Systems User Guide
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Maintenance Projects\Dell
Contax\CxU_Switching_NetworkSecurity.fm
DELL CONFIDENTIAL – PRELIMINARY 9/11/12 - FOR PROOF ONLY
The following is an example of some of the CLI commands:
deny protocol {any|source-ip-address
source-wildcard} {any|destination-ip-
address destination-wildcard} [dscp
number|precedence number] [time-range
time-range-name] [disable-port|log-input]
deny icmp {any|source-ip-address source-
wildcard} {any|destination-ip-address
destination-wildcard{any|icmp-type}
{any|icmp-code} [dscp number|precedence
number] [time-range time-range-name]
[disable-port|log-input]
deny igmp {any|source-ip-address source-
wildcard} {any|destination-ip-address
destination-wildcard}[igmp-type] [dscp
number|precedence number] [time-range
time-range-name] [disable-port|log-input]
deny tcp {any|source-ip-address source-
wildcard} {any|source-port|port-
range}{any|destinat
ion-ip-address
destination-wildcard} {any|destination-
port/port-range } [dscp number|precedence
number] [match-all list-of-flags] [time-
range time-range-name] [disable-port|log-
input]
deny udp {any|source-ip-address source-
wildcard} {any|source-port|port-range}
{any|destination-ip-address destination-
wildcard} {any|destination-port|port-range
} [dscp number|precedence number] [match-
all time-range-name] [time-range time-
range-name] [disable-port|log-input]
Sets deny conditions
for IPv4 access list (in
access list
configuration mode).
console(config)# ip access-list extended server
console(config-ip-al)# permit ip 1.1.1.0 0.0.0.255
1.1.2.0 0.0.0.0
Table 8-5. IP-Based ACE CLI Commands (Continued)
CLI Command Description