beautypg.com

Access-list standard numbered filter), Access-list – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 920

background image

IPv4 Software Access Control List (ACL) Commands

Software Reference for x310 Series Switches

35.34

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

(access-list standard numbered filter)

This ACL filter adds a source IP address filter entry to a current standard numbered access-
list. If a sequence number is specified, the new filter entry is inserted at the specified
location. Otherwise, the new filter entry is added at the end of the access-list.

The no variant of this command removes a source IP address filter entry from the current
standard numbered access-list. You can specify the source IP address filter entry for
removal by entering either its sequence number (e.g. no 10), or by entering its source IP
address filter profile without specifying its sequence number.

Note that the sequence number can be found by running the

show access-list (IPv4

Software ACLs)

command.

Syntax

[<sequence-number>] {deny|permit} {<source>|host <host-address>|any}

no {deny|permit} {<source>|host <host-address>|any}

no <sequence-number>

Mode

IPv4 Standard ACL Configuration

Default

Any traffic controlled by a software ACL that does not explicitly match a filter is denied.

Parameter

Description

<sequence-number>

<1-65535>
The sequence number for the filter entry of the
selected access control list.

deny

Access-list rejects packets of the type specified.

permit

Access-list allows packets of the type specified

<source>

The source address of the packets. You can specify
either a subnet or all sources. The following are the
valid formats for specifying the source:

<ip-addr>
<reverse-mask>

Enter a reverse mask for the
source address in dotted
decimal format. For example,
entering 192.168.1.1
0.0.0.255

is the same as

entering 192.168.1.1/24.

An IPv4 address in a.b.c.d
format.

host

A single source host.

<host-address>

Single source host address.

any

Matches any source IP address.