ADTRAN 5000 Series - Manual (Page 344)

Command Reference Guide Global Configuration Mode Command Set
61200990L1-35E Copyright © 2005 ADTRAN 344
ip access-list extended
Use the ip access-list extended command to create an empty access list and enter the extended access-list.
Use the no form of this command to delete an access list and all the entries contained in it.
The following lists the complete syntax for the ip access-list extended commands:
Example:
Syntax Description
Identifying the configured access list using an alphanumeric descriptor. All access
list descriptors are case-sensitive.
Specifies the data protocol such as IP, ICMP, TCP, UDP, or a specific protocol
(range: 0 to 255).
Specifies the source IP address used for packet matching. IP addresses can be
expressed in one of three ways:
1. Using the keyword any to match any IP address. For example, entering deny
any will effectively shut down the interface that uses the access list because all
traffic will match the any keyword.
2. Using the host to specify a single host address. For example,
entering permit host 196.173.22.253 will allow all traffic from the host with an
IP address of 196.173.22.253.
3. Using the format to match all IP addresses in a “range.”
Wildcard masks work in reverse logic from subnet mask. Specifying a one in
the wildcard mask equates to a “don’t care”. For example, entering permit
192.168.0.0 0.0.0.255 will permit all traffic from the 192.168.0.0/24 network.
Optional. The source port is used only when is tcp or udp.
Example:
[permit | deny] icmp [any | host | ]
[any | host | ] * * *
* = optional
Source IP Address
Destination IP Address
[permit | deny] [ip | tcp | udp] [any | host | ]
* [any | host | ] *
Source IP Address
Destination IP Address