beautypg.com

QTECH QSW-3400 Инструкция по настройке User Manual

Page 303

background image

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1

302

} | any-source | {host-source }} [s-

port { | range }]

{{ } | any-destination | {host-

destination }} [d-port { | range

}] [ack+fin+psh+rst+urg+syn]

[precedence ] [tos ][time-range

range-name>]

extended IP access rule; if the

numbered extended access-list of

specified number does not exist,

then an access-list will be created

using this number.

access-list {deny | permit} udp {{

} | any-source | {host-source }} [s-

port { | range }]

{{ } | any-destination | {host-

destination }} [d-port { | range

}] [precedence ] [tos

][time-range]

Creates

a

numbered

UDP

extended IP access rule; if the

numbered extended access-list of

specified number does not exist,

then an access-list will be created

using this number.

access-list {deny | permit} {eigrp | gre | igrp |

ipinip | ip | ospf | } {{

} | any-source | {host-source }}

{{ } | any-destination | {host-

destination }} [precedence ] [tos

][time-range]

Creates a numbered IP extended

IP access rule for other specific IP

protocol or all IP protocols; if the

numbered extended access-list of

specified number does not exist,

then an access-list will be created

using this number.

no access-list

Deletes a numbered extensive IP

access-list.

(3) Configuring a standard IP access-list basing on nomenclature

1) Create a name-based standard IP access-list

Command

Explanation

Global Mode

ip access-list standard

no ip access-list standard

Creates a standard IP access-

list based on nomenclature; the
“no ip access-list standard
“ command deletes the

name-based

standard

IP

access-list.

2)

Specify multiple “permit” or “deny” rules

Command

Explanation