PLANET WGSW-52040 - Manual (Page 614)

38-154
Switch(Config-MacIp-Ext-Nacl-macip_acl)#
38.18 permit | deny (ip extended)
Command:
[no] {deny | permit} icmp {{<sIpAddr> <sMask>} | any-source | {host-source <sIpAddr>}} {{<dIpAddr>
<dMask>} | any-destination | {host-destination <dIpAddr>}} [<icmp-type> [<icmp-code>]] [precedence
<prec>] [tos <tos>][time-range<time-range-name>]
[no] {deny | permit} igmp {{<sIpAddr> <sMask>} | any-source | {host-source <sIpAddr>}} {{<dIpAddr>
<dMask>} | any-destination | {host-destination <dIpAddr>}} [<igmp-type>] [precedence <prec>] [tos
<tos>][time-range<time-range-name>]
[no] {deny | permit} tcp {{ <sIpAddr> <sMask> } | any-source | {host-source <sIpAddr> }} [s-port { <sPort> |
range <sPortMin> <sPortMax> }] {{ <dIpAddr> <dMask> } | any-destination | {host-destination <dIpAddr> }}
[d-port { <dPort> | range <dPortMin> <dPortMax> }] [ack+fin+psh+rst+urg+syn] [precedence <prec> ] [tos
<tos> ][time-range <time-range-name> ]
[no] {deny | permit} udp {{ <sIpAddr> <sMask> } | any-source | {host-source <sIpAddr> }} [s-port { <sPort> |
range <sPortMin> <sPortMax> }] {{ <dIpAddr> <dMask> } | any-destination | {host-destination <dIpAddr> }}
[d-port { <dPort> | range <dPortMin> <dPortMax> }] [precedence <prec> ] [tos
<tos> ][time-range<time-range-name> ]
[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | ospf | <protocol-num>} {{<sIpAddr> <sMask>} |
any-source | {host-source <sIpAddr>}} {{<dIpAddr> <dMask>} | any-destination | {host-destination
<dIpAddr>}} [precedence <prec>] [tos <tos>][time-range<time-range-name>]
Functions:
Create a name extended IP access rule to match specific IP protocol or all IP protocol.
Parameters:
<sIpAddr> is the source IP address, the format is dotted decimal notation; <sMask > is the reverse mask of source
IP, the format is dotted decimal notation; <dIpAddr> is the destination IP address, the format is dotted decimal
notation; <dMask> is the reverse mask of destination IP, the format is dotted decimal notation, attentive position o,
ignored position 1; <igmp-type>, the type of igmp, 0-15; <icmp-type>, the type of icmp, 0-255 ; <icmp-code>,
protocol No. of icmp, 0-255; <prec>, IP priority, 0-7; <tos>, to value, 0-15; <sPort>, source port No., 0-65535;
<sPortMin>, the down boundary of source port; <sPortMax>, the up boundary of source port; <dPort>, destination
port No. 0-65535; <dPortMin>, the down boundary of destination port; <dPortMax>, the up boundary of destination
port; <time-range-name>, time range name.
Command Mode:
Name extended IP access-list configuration mode
Default: