MES3000 Ethernet switch series                      201 
permit arp 
{any/source-mac source-mac-wildcard } 
{any/ destination mac destination mac wildcard} 
{any/sender-ip sender-ip-wildcard } 
{any/target-ip target-ip-wildcard} 
[vlan vlan_id] [index index] 
Add  a  permit  filtration  record  for  the  ARP  protocol.  Packets  which  fulfil 
the record's requirements will be processed by the switch. 
permit ip 
{any|source_mac source-mac-wildcard} 
{any|destination_mac 
destination_mac_wildcard} 
{any|source_ip source_ip_wildcard} 
{any|destination_ip destination_ip_wildcard} 
[dscp dscp | precedence precedence] 
[time-range range_name] [index index]  
[offset-list offset_list_name] 
[vlan vlan_id]  
Add  a  permit  filtration  record  for  the  ARP.  Packets  which  fulfil  the 
record's requirements will be processed by the switch. 
permit icmp  
{any|source source_wildcard} 
{any|destination destination_wildcard} 
{any|icmp_type} 
{any|icmp_code}  
[dscp dscp | ip-precedence precedence]  
[time-range time_name] [index index]  
[offset-list offset_list_name] 
Adds  a  permit  filtration  record  for  the  ICMP.  Packets  which  fulfil  the 
record's requirements will be processed by the switch.   
permit igmp  
{any|source source_wildcard } 
{any|destination destination_wildcard} 
[igmp_type] 
[dscp dscp | precedence precedence]  
[time-range time_name] [index index]  
[offset-list offset_list_name] 
Adds  a  permit  filtration  record  for  the  IGMP.  Packets  which  fulfil  the 
record's requirements will be processed by the switch.   
permit tcp 
{any|source source_wildcard } 
{any|source_port} 
{any|destination destination_wildcard} 
{any|destination_port}  
[dscp dscp | precedence precedence]  
[match-all list_of_flags]  
[time-range time_name] [index index]  
[offset-list offset_list_name] 
Adds  a  permit  filtration  record  for  the  TCP.  Packets  which  fulfil  the 
record's requirements will be processed by the switch. 
permit udp 
{any| source source_wildcard}  
{any| source_port} 
{any|destination destination_wildcard} 
{any|destination-port}  
[dscp dscp | precedence precedence]  
[time-range time_name] [index index] 
[offset-list offset_list_name] 
Adds  a  permit  filtration  record  for  the  UDP.  Packets  which  fulfil  the 
record's requirements will be processed by the switch.   
deny protocol 
{any|source source_wildcard} 
{any|destination destination_wildcard} 
[dscp dscp | precedence precedence] 
[time-range time_name] 
[disable-port|log-input]   
[index index] [offset-list offset_list_name] 
Adds a deny filtration record for the ARP. Packets which fulfil the record's 
requirements will be blocked by the switch. If the disable-port keyword is 
specified,  the  physical  interface  having  received  the  packet  will  be 
disabled.  
If the log-input keyword is specified, the physical a message will be sent 
to the system log. 
deny arp {any/source-mac source-mac-wildcard } 
{any/ destination mac destination mac wildcard } 
{any/sender-ip sender-ip-wildcard } 
{any/target-ip target-ip-wildcard } 
[{log-input} {disable-port}]                                 
[vlan vlan_id] 
Add a deny filtration record for the ARP. Packets which fulfil the record's 
requirements will be blocked by the switch. If the disable-port keyword is 
specified,  the  physical  interface  having  received  the  packet  will  be 
disabled.  
If the log-input keyword is specified, the physical a message will be sent 
to the system log.