You display the configuration of the access control list with the show access-lists
command.
11.5.5.5 permit tcp
Description
With this command, you configure an IP access control list for the TCP protocol.
You have the following options:
● All incoming and/or outgoing TCP segments are forwarded.
● Incoming and/or outgoing TCP segments of a specific host are forwarded.
● Incoming and/or outgoing TCP segments of hosts of a specific subnet are forwarded.
● Incoming and/or outgoing TCP segments are forwarded to specific ports.
Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were created.
The index number of the access control list is not used for this.
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
permit tcp {any | host <src-ip-address> | <src-ip-address> <src-
mask> }[{gt <src-port-number (1-65535)> | lt <src-port-number
(1-65535)> |eq <src-port-number (1-65535)> | range <src-port-number
(1-65535)> <src-port-number (1-65535)>}] { any | host <dest-ip-
address> | <dest-ip-address> <dest-mask> } [{gt <dest-port-number
(1-65535)> | lt <dest-port-number (1-65535)> | eq <dest-port-number
(1-65535)> | range <dest-port-number (1-65535)> <dest-port-number
(1-65535)>}] [dscp <value (0-63)>]
The parameters have the following meaning:
Parameter Description Range of values / note
any Forwards all incoming TCP segments. -
host Keyword for a an individual IPv4 ad‐
dress
-
Security and authentication
11.5 IP access control list
SCALANCE W770/W730 acc. to IEEE 802.11n Command Line Interface
Configuration Manual, 09/2017, C79000-G8976-C324-08 569
To Next Page
Loading...
Need help?
General
