FoxGate S6124 - Permit | Deny (Ip Extended)

287
27.18 permit | deny (ip extended)
Command: [no] {deny | permit} icmp {{<sIpAddr> <sMask>} | any-source |
{host-source <sIpAddr>}} {{<dIpAddr> <dMask>} | any-destination |
{host-destination <dIpAddr>}} [<icmp-type> [<icmp-code>]] [precedence <prec>]
[tos <tos>][time-range<time-range-name>]
[no] {deny | permit} igmp {{<sIpAddr> <sMask>} | any-source | {host-source
<sIpAddr>}} {{<dIpAddr> <dMask>} | any-destination | {host-destination <dIpAddr>}}
[<igmp-type>] [precedence <prec>] [tos <tos>][time-range<time-range-name>]
[no] {deny | permit} tcp {{ <sIpAddr> <sMask> } | any-source | {host-source
<sIpAddr> }} [s-port { <sPort> | range <sPortMin> <sPortMax> }] {{ <dIpAddr>
<dMask> } | any-destination | {host-destination <dIpAddr> }} [d-port { <dPort> |
range <dPortMin> <dPortMax> }] [ack+fin+psh+rst+urg+syn] [precedence <prec> ]
[tos <tos> ][time-range <time-range-name> ]
[no] {deny | permit} udp {{ <sIpAddr> <sMask> } | any-source | {host-source
<sIpAddr> }} [s-port { <sPort> | range <sPortMin> <sPortMax> }] {{ <dIpAddr>
<dMask> } | any-destination | {host-destination <dIpAddr> }} [d-port { <dPort> |
range <dPortMin> <dPortMax> }] [precedence <prec> ] [tos <tos> ][time-range
<time-range-name> ]
[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | ospf | < protocol-num >}
{{<sIpAddr> <sMask>} | any-source | {host-source <sIpAddr>}} {{<dIpAddr>
<dMask>} | any-destination | {host-destination <dIpAddr>}} [precedence <prec>]
[tos <tos>][time-range<time-range-name>]
Functions: Create a name extended IP access rule to match specific IP protocol or all IP
protocol.
Parameters: <sIpAddr> is the source IP address, the format is dotted decimal notation;
<sMask > is the reverse mask of source IP, the format is dotted decimal notation;
<dIpAddr> is the destination IP address, the format is dotted decimal notation; <dMask>
is the reverse mask of destination IP, the format is dotted decimal notation, attentive
position o, ignored position 1; <igmp-type>, the type of igmp, 0-15; <icmp-type>, the
type of icmp, 0-255 ; <icmp-code>, protocol No. of icmp, 0-255; <prec>, IP priority, 0-7;
<tos>, to value, 0-15; <sPort>, source port No., 0-65535; <sPortMin>, the down
boundary of source port; <sPortMax>, the up boundary of source port; <dPort>,
destination port No. 0-65535; <dPortMin>, the down boundary of destination port;
<dPortMax>, the up boundary of destination port; <time-range-name>, time range
name.
Command Mode: Name extended IP access-list configuration mode