beautypg.com

19 permit | deny( ip extended) – Accton Technology ES4626 User Manual

Page 766

background image

766

Parameters: :

name of access-list excluding blank or quotation mark, and it must

start with letter, and the length cannot exceed 16 (remark: sensitivity on capital or small

letter.)

Command Mode:

Global mode

Default:

No named MAC-IP access-list

Usage Guide:After assigning this commands for the first time, only an empty name

access-list is created and no list item included.

Examples:

Create an MAC-IP ACL named mac. acl

Switch(Config)# mac-ip-access-list extended macip_acl

Switch(Config-MacIp-Ext-Nacl-macip_acl)#

18.2.2.19 permit | deny( ip extended)

Command: [no] {deny | permit} icmp {{ } | any | {host

}} {{

} | any-destination | {host-destination

}} [

[]] [precedence ] [tos

][time-range]

[no] {deny | permit} igmp {{ } | any | {host }}

{{

} | any-destination | {host-destination }}

[] [precedence ] [tos ][time-range]

[no] {deny | permit} tcp {{ } | any | {host }}

[s-port ] {{ } | any-destination | {host-destination

}} [d-port ] [ack+fin+psh+rst+urg+syn] [precedence ] [tos

][time-range]

[no] {deny | permit} udp {{ } | any | {host }}

[s-port ] {{ } | any-destination | {host-destination

}} [d-port ] [precedence ] [tos

][time-range]

[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | } {{

} | any | {host }} {{ } | any-destination |

{host-destination

}} [precedence ] [tos

][time-range]

Functions:

Create a name expansion IP access rule to match specific IP protocol or all

IP protocol;

Parameters:

is the source IP address, the format is dotted decimal notation;

<sMask >

is the reverse mask of source IP, the format is dotted decimal notation;

is the destination IP address, the format is dotted decimal notation; <dMask>

is the reverse mask of destination IP, the format is dotted decimal notation, attentive

position o, ignored position 1; <igmp-type>, the type of igmp, 0-15; , the

This manual is related to the following products: