Asus GigaX3124 - Manual (Page 159)

GigaX3124 Layer3 Switch CLI Command Reference
134
13.45 access-list (<100-199>|<2000-2699>)
(deny|permit) (tcp|udp) host IPADDR
[eq] [<0-65535>] IPADDR MASK [IFNAME]
Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)
host IPADDR [eq] [<0-65535>] IPADDR MASK [IFNAME]
Parameters access-list Add an access list entry
<100-199> Extended IP access-list number
<2000-2699> Extended IP access-list number (expanded
range)
permit Specify packets to forward
deny Specify packets to reject.
tcp Transmission Control Protocol
udp User Datagram Protocol
host A single Source host
IPADDR Source address
eq Match only packets on a given port numbe
<0-65535> Port number
IPADDR destination address
MASK destination wildcard bits
[IFNAME] Egress interface name
Command Mode Global configuration mode
No/clear
no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)
host IPADDR [eq] [<0-65535>] IPADDR MASK [IFNAME]
Show show access-lists [ACLNAME]
Default
Description
This command specifies one or more conditions denied or
permitted to decide if the packet is forwarded or dropped.
Examples ASUS(config)# access-list 100 permit tcp host 10.0.0.1 eq 21
10.0.0.4 0.0.0.0