Chapter 9
| Access Control Lists
IPv4 ACLs
– 272 –
Related Commands
access-list ip (270)
Time Range (128)
permit, deny,
redirect-to
(Extended IPv4 ACL)
This command adds a rule to an Extended IPv4 ACL. The rule sets a filter condition
for packets with specific source or destination IP addresses, protocol types, source
or destination protocol ports, or TCP control codes. Use the no form to remove a
rule.
Syntax
{permit | deny | redirect-to interface} [protocol-number | udp]
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[time-range time-range-name]
no {permit | deny | redirect-to interface} [protocol-number | udp]
{any | source address-bitmask | host source}
{any | destination address-bitmask | host
destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
{permit | deny | redirect-to interface} tcp
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[control-flag control-flags flag-bitmask]
[time-range time-range-name]
no {
permit | deny | redirect-to interface} tcp
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[control-flag control-flags flag-bitmask]
interface
ethernet unit/port
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-28/52)
protocol-number – A specific protocol number. (Range: 0-255)
source – Source IP address.
To Next Page
Loading...
Need help?
General
