PLANET WGSW-52040 - Manual (Page 343)

on| {host-destination<destination-host-ip>}}
[<igmp-type>] [precedence <precedence>] [tos
<tos> ][time-range<time-range-name>]
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}}{any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}tcp
{{<source><source-wildcard>}|any-source|
{host-source<source-host-ip>}} [s-port {<port1> |
range <sPortMin> <sPortMax>}]
{{<destination><destination-wildcard>}|any-destinati
on| {host-destination <destination-host-ip>}} [d-port
{<port3> | range <dPortMin> <dPortMax>}]
[ack+fin+psh+rst+urg+syn] [precedence
<precedence>] [tos
<tos>][time-range<time-range-name>]
Creates a numbered mac-ip
extended mac-tcp access
rule; if the numbered
extended access-list of
specified number does not
exist, then an access-list will
be created using this number.
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
sk> }}{any-destination-mac|{host-destination-mac
<host_dmac> }|{<dmac><dmac-mask>}}udp
{{<source><source-wildcard>}|any-source|
{host-source<source-host-ip>}} [s-port {<port1> |
range <sPortMin> <sPortMax>}]
{{<destination><destination-wildcard>}|any-destinati
on| {host-destination<destination-host-ip>}} [d-port
{<port3> | range <dPortMin> <dPortMax>}]
[precedence <precedence>] [tos
<tos> ][time-range<time-range-name>]
Creates a numbered mac-udp
extended mac-ip access rule;
if the numbered extended
access-list of specified
number does not exist, then
an access-list will be created
using this number.
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
sk>
}} {any-destination-mac|{host-destination-mac
<host_dmac> }|{<dmac><dmac-mask>}}
{eigrp|gre|igrp|ip|ipinip|ospf|{<protocol-num>}}
{{<source><source-wildcard>}|any-source|
{host-source<source-host-ip>}}
{{<destination><destination-wildcard>}|any-destinati
on| {host-destination<destination-host-ip>}}
[precedence <precedence>] [tos
Creates a numbered
extended mac-ip access rule
for other specific mac-ip
protocol or all mac-ip
protocols; if the numbered
extended access-list of
specified number does not
exist, then an access-list will
be created using this number.
41-122