ES4626-SFP Management Guide.pdf

} | any-destination | {host-destination }} [d-port { | range
}] [ack+fin+psh+rst+urg+syn] [precedence ] [tos
][time-range]
[no] {deny | permit} udp {{ } | any-source | {host-source
}} [s-port { | range }] {{
} | any-destination | {host-destination }} [d-port { | range
}] [precedence ] [tos
][time-range]
[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | } {{
} | any-source | {host-source }} {{ } |
any-destination | {host-destination }} [precedence ] [tos
][time-range]
Functions: Create a name extended IP access rule to match specific IP protocol or all IP
protocol;
Parameters: is the source IP address, the format is dotted decimal notation;
is the reverse mask of source IP, the format is dotted decimal notation;
is the destination IP address, the format is dotted decimal notation;
is the reverse mask of destination IP, the format is dotted decimal notation, attentive
position o, ignored position 1; , the type of igmp, 0-15; , the
type of icmp, 0-255 ; , protocol No. of icmp, 0-255; , IP priority, 0-7;
, to value, 0-15; , source port No., 0-65535; , the down
boundary of source port; , the up boundary of source port; ,
destination port No. 0-65535; , the down boundary of destination
port;, the up boundary of destination port; , time range
name.
Command Mode: Name extended IP access-list configuration mode
Default: No access-list configured
Examples: Create the extended access-list, deny icmp packet to pass, and permit udp
packet with destination address 192. 168. 0. 1 and destination port 32 to pass.
Switch(Config)# access-list ip extended udpFlow
Switch(Config-Ext-Nacl-udpFlow)# deny igmp any any-destination
Switch(Config-Ext-Nacl-udpFlow)# permit udp any host-destination 192.168.0.1 d-port 32
22.2.2.19 permit | deny(ip standard)
Command:{deny | permit} {{ } | any | {host }}
no {deny | permit} {{ } | any | {host }}
Functions:Create a name standard IP access rule, and ‘no {deny | permit}
{{ } | any | {host }}’ action of this command deletes this
821