Chapter 10
| Access Control Lists
IPv4 ACLs
– 328 –
no
{
permit
|
deny
} [protocol-number |
udp
]
{
any
| source address-bitmask |
host
source}
{
any
| destination address-bitmask |
host
destination}
[
dscp
dscp] [
precedence
precedence]
[
source
-port sport [bitmask]]
[
destination
-port dport [port-bitmask]]
{
permit
|
deny
}
tcp
{
any
| source address-bitmask |
host
source}
{
any
| destination address-bitmask |
host
destination}
[
dscp
dscp] [
precedence
precedence]
[
source-port
sport [bitmask]]
[
destination-port
dport [port-bitmask]]
[
control-flag
control-flags flag-bitmask]
[
time-range
time-range-name]
no
{
permit
|
deny
}
tcp
{
any
| source address-bitmask |
host
source}
{
any
| destination address-bitmask |
host
destination}
[
dscp
dscp] [
precedence
precedence]
[
source-port
sport [bitmask]]
[
destination-port
dport [port-bitmask]]
[
control-flag
control-flags flag-bitmask]
protocol-number – A specific protocol number. (Range: 0-255)
source – Source IP address.
destination – Destination IP address.
address-bitmask – Decimal number representing the address bits to match.
host
– Keyword followed by a specific IP address.
dscp
– DSCP priority level. (Range: 0-63)
precedence
– IP precedence level. (Range: 0-7)
sport – Protocol
4
source port number. (Range: 0-65535)
dport – Protocol
4
destination port number. (Range: 0-65535)
port-bitmask – Decimal number representing the port bits to match.
(Range: 0-65535)
control-flags – Decimal number (representing a bit string) that specifies flag
bits in byte 14 of the TCP header. (Range: 0-63)
flag-bitmask – Decimal number representing the code bits to match.
time-range-name - Name of the time range. (Range: 1-16 characters)
Default Setting
None
Command Mode
Extended IPv4 ACL
4. Includes TCP, UDP or other protocol types.
To Next Page
Loading...
