19 permit | deny( ip extended) – Accton Technology ES4626 User Manual

Page 766

Advertising
background image

766

Parameters:<name> :

name of access-list excluding blank or quotation mark, and it must

start with letter, and the length cannot exceed 16 (remark: sensitivity on capital or small

letter.)

Command Mode:

Global mode

Default:

No named MAC-IP access-list

Usage Guide:After assigning this commands for the first time, only an empty name

access-list is created and no list item included.

Examples:

Create an MAC-IP ACL named mac. acl

Switch(Config)# mac-ip-access-list extended macip_acl

Switch(Config-MacIp-Ext-Nacl-macip_acl)#

18.2.2.19 permit | deny( ip extended)

Command: [no] {deny | permit} icmp {{<sIpAddr> <sMask>} | any | {host

<sIpAddr>}} {{<dIpAddr>

<dMask>} | any-destination | {host-destination

<dIpAddr>}} [<icmp-type>

[<icmp-code>]] [precedence <prec>] [tos

<tos>][time-range<time-range-name>]

[no] {deny | permit} igmp {{<sIpAddr> <sMask>} | any | {host <sIpAddr>}}

{{<dIpAddr>

<dMask>} | any-destination | {host-destination <dIpAddr>}}

[<igmp-type>] [precedence <prec>] [tos <tos>][time-range<time-range-name>]

[no] {deny | permit} tcp {{<sIpAddr> <sMask>} | any | {host <sIpAddr>}}

[s-port <sPort>] {{<dIpAddr> <dMask>} | any-destination | {host-destination

<dIpAddr>}} [d-port <dPort>] [ack+fin+psh+rst+urg+syn] [precedence <prec>] [tos

<tos>][time-range<time-range-name>]

[no] {deny | permit} udp {{<sIpAddr> <sMask>} | any | {host <sIpAddr>}}

[s-port <sPort>] {{<dIpAddr> <dMask>} | any-destination | {host-destination

<dIpAddr>}} [d-port <dPort>] [precedence <prec>] [tos

<tos>][time-range<time-range-name>]

[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | <int>} {{<sIpAddr>

<sMask>} | any | {host <sIpAddr>}} {{<dIpAddr> <dMask>} | any-destination |

{host-destination

<dIpAddr>}} [precedence <prec>] [tos

<tos>][time-range<time-range-name>]

Functions:

Create a name expansion IP access rule to match specific IP protocol or all

IP protocol;

Parameters: <sIpAddr>

is the source IP address, the format is dotted decimal notation;

<sMask >

is the reverse mask of source IP, the format is dotted decimal notation;

<dIpAddr>

is the destination IP address, the format is dotted decimal notation; <dMask>

is the reverse mask of destination IP, the format is dotted decimal notation, attentive

position o, ignored position 1; <igmp-type>, the type of igmp, 0-15; <icmp-type>, the

Advertising
This manual is related to the following products: