Asus GigaX3124 - Manual (Page 178)

GigaX3124 Layer3 Switch CLI Command Reference
153
IPADDR Source address
MASK Source wildcard bits
eq Match only packets on a given port numbe
<0-65535> Port number
any any destination address
eq Match only packets on a given port numbe
<0-65535> Port number
[IFNAME] Egress interface name
Command Mode IP extended access-list mode
No/clear
no (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any
[eq] [<0-65535>] [IFNAME]
Show show access-lists [ACLNAME]
Default
Description
This command specifies one or more conditions denied or
permitted to decide if the packet is forwarded or dropped.
Examples ASUS(config-ext-acl)# permit tcp 10.0.1.0 0.0.0.255 eq 12 any
eq 12 [gi1/0/1]
13.70 (permit|deny) icmp IPADDR MASK any
<0-255> code <0-255> [IFNAME]
Syntax (permit|deny) icmp IPADDR MASK any [<0-255>] code [<0-255>]
[IFNAME]
Parameters permit Specify packets to forward
deny Specify packets to reject.
icmp Internet Control Message Protocol
IPADDR Source address
MASK Source wildcard bits
any any destination address
<0-255> ICMP message type
<0-255> ICMP message code
[IFNAME] Egress interface name