HP J9574A

10-44
IPv4 Access Control Lists (ACLs)
Configuring and Assigning an IPv4 ACL
Figure 10-11. Example of General Structure Options for an Extended ACL
ip access-list extended < identifier >
[ [ seq-# ] remark < remark-str >]
< permit | deny > < ipv4-protocol-type > < SA > < src-acl-mask > < DA > <dest-acl-mask >
< permit | deny > tcp
< SA > [< operator > < value >]
< DA > [< operator > < value >]
[established]
[ack | fin | rst | syn]
< permit | deny > udp
< SA > < src-acl-mask > [< operator > < port-id >]
< DA > < dest-acl-mask > [< operator > < port-id >]
< permit | deny > icmp
< SA > < src-acl-mask > < DA > < dest-acl-mask > [ icmp-type ]
< permit | deny > igmp
< SA > < SA-mask > < DA > < dest-acl-mask > [ igmp-type ]
[ precedence < priority >]
[ tos < tos-setting >]
[log] (Allowed only with “deny” ACEs.)