Brocade Mobility RFS7000-GR Controller CLI Reference Guide (Supporting software release 4.1.0.0-040GR and later) User Manual

Page 380

Advertising
background image

366

Brocade Mobility RFS7000-GR CLI Reference Guide

53-1001945-01

Extended ACL Config Commands

14

Parameters

permit {ip}
{source/source-mask
A.B.C.D/M| host sourcehost
| any}
{destination/destination-ma
sk | host destinationhost |
any}
[log]
[rule-precedence
access-list-entry precedence]

Use the permit command to allow IP packets.

permit – The keyword specifies permit action on an ACL.

{ip} – Specify IP (to match any protocol).

{source/source-mask A.B.C.D/M| host sourcehost | any} – source is the source
IP address of the network or host in dotted decimal. Source-mask is the
network mask. For example, 10.1.1.10/24 indicates the first 24 bits of the
source IP are used for matching.

any is an abbreviation for source IP of 0.0.0.0 and source-mask bits equal
to 0.

host is an abbreviation for exact source (A.B.C.D) and source-mask bits
equal to 32.

{destination/destination-mask | host destinationhost | any} – The destination
host IP address or destination network address.

[log] – Generates log messages when the packet coming from the interface
matches the ACL entry. Log messages are generated only for router ACLs.

[rule-precedence access-list-entry precedence] – Integer value between
1-5000. This value sets the rule precedence in the ACL.

Advertising