beautypg.com

23 permit – CANOGA PERKINS 9175 Command Reference User Manual

Page 607

background image

CanogaOS Command Reference

33-16

Usage

None

Examples

This example shows how to create a filter in IP ACL to deny any IGMP packets.

Switch(config-ip-acl)# 1 deny igmp any any

This example shows how to create a filter in IP ACL to deny the IGMP packets with the source IP

address 1.1.1.1, any destination IP address and the igmp-type pim.

Switch(config-ip-acl)# 2 deny igmp host 1.1.1.1 any pim

Related Commands

deny

deny tcp

deny udp

deny icmp

33.23 permit

Use this command to permit packets matching the IP filter.

Command Syntax

[<1-2147483646>] permit {<0-255> | any } { source source-mask | any | host source } {destination

destination-mask any | host | destination} [ ip-precedence precedence | dscp dscp ] [ fragments ]

[ routed-packet ] [ options ] [ time-range time-range-name ] [ stats ]

<1-2147483646>: the sequence number of the filter in IP ACL. An auto-generated sequence number will

be assigned to the filter if this field is not presented

<0-255>: an IP protocol number

any: any IP protocol

source source-mask: the source IP address and its wildcard bits

any: any source host

host source: the source IP address of a host

destination destination-mask: the destination IP address and its wildcard bits

ip-precedence precedence: match packets with given precedence value

dscp dscp: match packets with given DSCP value

fragments

˖check non-initial fragments

routed-packet: match routed packet

options: match packets with IP options

time-range: the time-range used by the ip filter

stats: statistic function will be enabled if this field is presented

Command Mode

IP ACL configuration

Usage