Allied Telesis AT-FS970M Series - Manual (Page 1559)

AT-FS970M Switch Command Line User’s Guide
1559
dst_ipaddress
Specifies the destination IP address of the ingress packets the
access list should filter. Choose one of the following:
any: Matches any IP address.
ipaddress/mask: Matches packets that have a destination IP
address of a specific subnet or end node.
host ipaddress: Matches packets with a destination IP address
of a specific end node. The HOST keyword indicates that the
address is of a specific end node and that no mask is required.
vlan
Indicates a VLAN identifier. Specify a VLAN if you want the ACL to
filter tagged packets. Omit a VLAN if you want the ACL to filter
untagged packets. Specify a value between 1 and 4094. You can
enter only one VID.
Mode
Global Configuration mode
Confirmation Commands
“SHOW ACCESS-LIST” on page 1619 and “SHOW INTERFACE
ACCESS-GROUP” on page 1621
Description
Use this command to create ACLs that identify traffic flows based on
protocol numbers and source and destination IP addresses. The protocol
numbers are listed in Table 189.
Table 189. Protocol Numbers
Number Description
1 Internet Control Message (RFC792)
2 Internet Group Management (RFC1112)
3 Gateway-to-Gateway (RFC823)
4 IP in IP (RFC2003)
5 Stream (RFC1190 and RFC1819))
6 TCP (Transmission Control Protocol)
(RFC793)
8 EGP (Exterior Gateway Protocol)
(RFC888)