Accton Technology ES4710BD - Manual (Page 272)

271
E ES4710BD 10 Slots L2/L3/L4 Chassis Switch
ip access-group {in|out }
no ip access-group {in|out}
Applies an access list to the specified direction on
the port; the “no ip access-group
{in|out}” command deletes the access list bound
to the port.
12.2.2 ACL Configuration Commands
12.2.2.1 access-list(extended)
Command: access-list {deny | permit} icmp {{ } | any-source |
{host-source }} {{ } | any-destination | {host-destination
}} [ []] [precedence ] [tos ]
access-list {deny | permit} igmp {{ } | any-source |
{host-source }} {{ } | any-destination | {host-destination
}} [<igmp-type>] [precedence ] [tos ]
access-list {deny | permit} tcp {{ } | any-source | {host-source
}} [s-port ] {{ } | any-destination | {host-destination
}} [d-port ] [ack | fin | psh | rst | syn | urg] [precedence ] [tos ]
access-list {deny | permit} udp {{ } | any-source |
{host-source }} [s-port ] {{ } | any-destination |
{host-destination }} [d-port ] [precedence ] [tos ]
access-list {deny | permit} {eigrp | gre | igrp | ipinip | ip | <int>} {{
} | any-source | {host-source }} {{ } | any-destination |
{host-destination }} [precedence ] [tos ]
no access-list
Function: Creates a numbered extended IP access rule for specific IP protocol or all IP protocols; if
the numbered extended access list of specified number does not exist, then an access list will be
created using this number. The “no” form command deletes a numbered extended IP access list.
Parameters: is the access table number from 100 to 199; is the source IP
address in decimal format; <sMask > is the mask complement of the source IP in decimal format;
is the destination IP address in decimal format; <dMask> is the mask complement of the
destination IP in decimal format, 0 for significant bit and 1 for ignored bit; <igmp-type> is the
IGMP type; is the ICMP type; is the ICMP protocol number; is
the IP priority from 0 – 7; is the tos value from 0 -15; is the source port number from
0 – 65535; is the destination port number from 0 – 65535.
Command mode: Global Mode