Enterasys SecureStack C2 - Access-List (Extended)

access-list (extended)
SecureStack C2 Configuration Guide 18-73
access-list (extended)
UsethiscommandtodefineanextendedIPaccesslistbynumberwhenoperatinginroutermode.
Thenoformofthiscommandremovesthedefinedaccesslistorentry:
Syntax
To apply ACL restrictions to IP, UDP, ICMP or TCP packets:
access-list access-list-number {deny | permit} protocol source [source-wildcard]
[operator [port]] destination [destination-wildcard]
no access-list access-list-number [entry]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Parameters
access‐list‐number Specif iesanextendedaccesslistnumber.Validvaluesarefrom100to199.
deny|permit Deniesorpermitsaccessifspecifiedconditionsaremet.
protocol SpecifiesanIPprotocolforwhichtodenyorpermitaccess.Validvalues
andtheircorrespondingprotocolsare:
•ip‐AnyInternetprotocol
• udp‐User
DatagramProtocol
• tcp‐TransmissionControlProtocol
• icmp‐InternetControlMessageProtocol
source Specifiesthenetworkorhostfromwhichthepacketwillbesent.Valid
optionsforexpressingsourceare:
•IPaddressorrangeofaddresses(A.B.C.D)
• any‐Anysourcehost
• hostsource‐IPaddressofasinglesourcehost
source‐wildcard
(Optional)Specifiesthebitstoignoreinthesourceaddress.
operatorport (Optional)AppliesaccessrulestoTCPorUDPsourceordestinationport
numbers.Possibleoperandis:
• eqport‐Matchesonlypacketsonagivenportnumber.
destination Specifiesthenetworkorhosttowhichthepacketwillbesent.Valid
options
forexpressingdestinationare:
•IPaddress(A.B.C.D)
• any‐Anydestinationhost
• hostsource‐IPaddressofasingledestinationhost
destination‐
wildcard
(Optional)Specifiesthebitstoignoreinthedestinationaddress.