Command Reference ACL Commands
destination-mac-address | any} [ icmp-type ] [ [ icmp-type [icmp-code ] ] | [ icmp-message ] ]
[precedence precedence] [tos tos] [fragment] [time-range time-range-name]
Transmission Control Protocol (TCP)
access-list id {deny | permit} tcp [VID [out][inner in]]{source source-wildcard | host Source | any}
{host source-mac-address | any } [operator port [port] ] {destination destination-wildcard | host
destination | any} {host destination-mac-address | any} [operator port [port] ] [precedence
precedence] [tos tos] [fragment] [range lower upper] [time-range time-range-name] [ match-all
tcp-flag | established ]
User Datagram Protocol (UDP)
access-list id {deny | permit} udp [ VID [out][inner in]] {source source –wildcard | host source |
any} {host source-mac-address | any } [ operator port [port] ] {destination destination-wildcard |
host destination | any}{host destination-mac-address | any} [operator port [port] ] [precedence
precedence] [tos tos] [fragment] [range lower upper] [time-range time-range-name]
Access list number. The ranges available are 1 to 99, 100 to 199,
1300 to 1999, 2000 to 2699, 2700 to 2899, and 700 to 799.
If not matched, access is denied.
If matched, access is permitted.
Specify the source IP address (host address or network address).
It can be discontinuous, for example, 0.255.0.32.
IP protocol number. It can be one of EIGRP, GRE, IPINIP, IGMP,
NOS, OSPF, ICMP, UDP, TCP, and IP. It can also be a number
representing the IP protocol between 0 and 255. The important
protocols such as ICMP, TCP, and UDP are described separately.
Specify the destination IP address (host address or network
address).
Wildcard of the destination IP address. It can be discontinuous, for
example, 0.255.0.32.
Packet fragment filtering
Specify the packet priority.
Packet precedence value (0 to 7)
Layer4 port number range of the packet.
Lower limit of the layer4 port number.
Upper limit of the layer4 port number.
Time range of packet filtering
Time range name of packet filtering
ICMP message type (0 to 255)
ICMP message type code (0 to 255)
Operator (lt-smaller, eq-equal, gt-greater, neq-unequal, range-range)