23 permit – CANOGA PERKINS 9175 Command Reference User Manual
Page 607
CanogaOS Command Reference
33-16
Usage
None
Examples
This example shows how to create a filter in IP ACL to deny any IGMP packets.
Switch(config-ip-acl)# 1 deny igmp any any
This example shows how to create a filter in IP ACL to deny the IGMP packets with the source IP
address 1.1.1.1, any destination IP address and the igmp-type pim.
Switch(config-ip-acl)# 2 deny igmp host 1.1.1.1 any pim
Related Commands
deny
deny tcp
deny udp
deny icmp
33.23 permit
Use this command to permit packets matching the IP filter.
Command Syntax
[<1-2147483646>] permit {<0-255> | any } { source source-mask | any | host source } {destination
destination-mask any | host | destination} [ ip-precedence precedence | dscp dscp ] [ fragments ]
[ routed-packet ] [ options ] [ time-range time-range-name ] [ stats ]
<1-2147483646>: the sequence number of the filter in IP ACL. An auto-generated sequence number will
be assigned to the filter if this field is not presented
<0-255>: an IP protocol number
any: any IP protocol
source source-mask: the source IP address and its wildcard bits
any: any source host
host source: the source IP address of a host
destination destination-mask: the destination IP address and its wildcard bits
ip-precedence precedence: match packets with given precedence value
dscp dscp: match packets with given DSCP value
fragments
˖check non-initial fragments
routed-packet: match routed packet
options: match packets with IP options
time-range: the time-range used by the ip filter
stats: statistic function will be enabled if this field is presented
Command Mode
IP ACL configuration
Usage