Enterasys Networks X-Pedition XSR CLI - Manual (Page 629)

General Security Commands
XSR CLI Reference Guide 16-85
Additional Syntax
The access-list command also provides the move option, expressed in the following syntax:
access-list list-number move destination src1 [src2]
Syntax of the “no” Form
The no form of this command removes the defined access list:
no access-list list-number [ent1][ent2]]
srcWild
CardBits Specifies bits to ignore in the source address.
Note: The srcWildCardBits/dstWildCardBits mask specifies bits to ignore (which allow
any value where the bits are set), as opposed to the traditional method of specifying
bits to keep.
host Only the exact source address matches the condition. Same as
srcWildCardBits = 0.0.0.0.
any Any source address matches the condition. Same as srcWildCardBits =
255.255.255.255.
qualifier Value applied to the source port: eq ‐ equal than, neq ‐ not equal to, lt ‐ less
than, gt ‐ greater than.
source-port Optional source port number (0 ‐ 65535).
range Value must be within the minimum and maximum source and destination
port range.
min-sport Lowest port number from 0 to 65535. Combine with max‐sport.
max-sport Highest port number from 0 to 65535. Normally greater than min‐sport but if
less than min, values are swapped.
dstIPAddr The destination expressed by IP address.
dstWild
CardBits
Specifies bits to ignore in the destination address.
destn-port Destination port number. Range: 0 to 65535.
type,code ICMP message type only (0‐255) and code (0‐255).
established Matches if a TCP connection is already established, that is, if either ACK or
RST bits are set in the TCP header.
Note: Source and destination ports are defined only for TCP or UDP. A message type and code can
be defined for ICMP.
list# ACL number, ranging from 100 ‐ 199 .
move Moves a sequence of ACL entries in front of another entry. Range: 1‐999.
destination Number of the existing ACL entry before which subsequent entry or range of
entries is to be moved. Range: 1 to 999. If being moved to the end, use a non‐
existent number (e.g., 999).
src1 Single entry number, or the first entry number in the range to be moved before
the destination. Range: 1 to 999.
src2 Optional last entry number in the range to be moved. Range: 1 to 999. If not
specified, only one entry is moved.