200 MES1000, MES2000 Ethernet Switches
permit igmp
{any|source_ip source_ip_wildcard}
{any|destination_ip destination_ip_wildcard}
[igmp-type]
[dscp dscp | precedence precedence]
[time-range range_name] [index index]
[offset-list offset_list_name]
Adds a permit filtration record for the IGMP protocol. Packets which fulfil
the record's requirements will be processed by the switch.
permit tcp
{any|source_ip source_ip_wildcard}
{any|source_port}
{any|destination_ip destination_ip_wildcard}
{any|destination_port}
[dscp dscp | precedence precedence]
[match-all list_of_flags]
[time-range range_name] [index index]
[offset-list offset_list_name]
Adds a permit filtration record for the TCP protocol. Packets which fulfil
the record's requirements will be processed by the switch.
permit udp
{any| source_ip source_ip_wildcard}
{any| source_port}
{any|destination_ip destination_ip_wildcard}
{any|destination_port}
[dscp dscp | precedence precedence]
[time-range range_name] [index index]
[offset-list offset_list_name]
Adds a permit filtration record for the UDP protocol. Packets which fulfil
the record's requirements will be processed by the switch.
deny protocol
{any|source_ip source_ip_wildcard}
{any|destination_ip destination_ip_wildcard}
[dscp dscp | precedence precedence]
[time-range range_name]
[disable-port|log-input] [index index]
[offset-list offset_list_name]
Adds a deny filtration record for a protocol. Packets which fulfil the
record's requirements will be blocked by the switch. If the disable-port
keyword is specified, the physical interface receiving the packet will be
disabled. If the log-input keyword is specified, the physical a message will
be sent to the system log.
deny ip
{any|source_mac source-mac-wildcard}
{any|destination_mac
destination_mac_wildcard}
{any|source_ip source_ip_wildcard}
{any|destination_ip destination_ip_wildcard}
[dscp dscp | precedence precedence]
[time-range range_name] [disable-port|log-
input] [index index] [offset-list offset_list_name]
Adds a deny filtration record for the IP protocol. Packets which fulfil the
record's requirements will be blocked by the switch. If the disable-port
keyword is specified, the physical interface receiving the packet will be
disabled.
If the log-input keyword is specified, the physical a message will be sent
to the system log.
deny icmp {any|source_ip source_ip_wildcard}
{any|destination_ip destination_ip_wildcard}
{any|icmp_type} {any|icmp_code}
[dscp dscp | precedence precedence]
[time-range range_name]
[disable-port|log-input] [index index]
[offset-list offset_list_name]
Adds a deny filtration record for the ICMP protocol. Packets which fulfil
the record's requirements will be blocked by the switch. If the disable-
port keyword is specified, the physical interface receiving the packet will
be disabled. If the log-input keyword is specified, the physical a message
will be sent to the system log.
deny igmp {any|source_ip source_ip_wildcard}
{any|destination_ip destination_ip_wildcard}
[igmp_type]
[dscp dscp | precedence precedence]
[time-range range_name]
[disable-port|log-input] [index index]
[offset-list offset_list_name]
Adds a deny filtration record for the IGMP protocol. Packets which fulfil
the record's requirements will be blocked by the switch. If the disable-
port keyword is specified, the physical interface receiving the packet will
be disabled. If the log-input keyword is specified, the physical a message
will be sent to the system log.
deny tcp {any| source_ip source_ip_wildcard}
{any|source_port}
{any|destination_ip destination_ip_wildcard}
{any|destination_port}
[dscp dscp | precedence precedence]
[match-all list_of_flags]
[time-range range_name]
[disable-port|log-input] [index index]
[offset-list offset_list_name]
Add the denying filtering record for TCP protocol. Packets that meet the
record conditions will be blocked by the switch. When the keyword
disable-port is used, the physical interface that receives such packet, will
be disabled. When the keyword log-input is used, the message will be
sent to the system log.
deny udp {any| source_ip source_ip_wildcard}
{any| source_port}
Add the denying filtering record for UDP protocol. Packets that meet the
record conditions will be blocked by the switch. When the keyword