DescriptionValueArgument
Source port in the TCP or UDP
header.
Integersource-port
The end of the source range of
ports.
Integersource-end-port
src-port-operator Operator “less” to compare the
port with the specied
source-port.
lt
Operator “equal” to compare the
port with the specied
source-port.
eq
Operator “greater” to compare the
port with the specied
source-port.
gt
The destination address in the
header of IP-packet.
IP-addressdestination
Mask to be applied to the
destination address in the header
IP-maskdestination-mask
of IP-packet before comparison
with destination. There are two
ways to enter the mask: in the
canonical form (for example,
255.255.255.0) and in the form of
prex with bit length (for example,
/24).
Destination port in the TCP or UDP
header.
Integerdestination-port
The end of the destination range
of ports.
Integerdestination-end-port
dst-port-operator Operator “less” to compare the
port with the specied
destination-port.
lt
Operator “equal” to compare the
port with the specied
destination-port.
eq
Operator “greater” to compare the
port with the specied
destination-port.
gt
Example
(config-acl)> deny icmp 192.168.0.0
255.255.255.0 192.168.1.1 255.255.255.0
ACL rule added.
History
Version Description
The access-list deny command has been introduced.2.00
Command Reference Guide — Keenetic Lite (KN-1310)
32
Chapter 3 Command Reference