PLANET WGSW-50040 - Manual (Page 317)

Commands for Security Function Chapter 6 Commands for TACACS+
21.4 access-list (ip standard)
Command:
access-list {deny | permit} {{ <sMask >} | any-source| {host-source
}}
no access-list
Functions:
Create a numeric standard IP access-list. If this access-list exists, then add a rule list; the “no
access-list “operation of this command is to delete a numeric standard IP access-list.
Parameters:
is the No. of access-list, 100-199;
is the source IP address, the format is dotted decimal notation;
<sMask > is the reverse mask of source IP, the format is dotted decimal notation.
Command Mode:
Global mode
Default:
No access-lists configured.
Usage Guide:
When the user assign specific for the first time, ACL of the serial number is created, then
the lists are added into this ACL.
Examples:
Create a numeric standard IP access-list whose serial No. is 20, and permit date packets with
source address of 10.1.1.0/24 to pass, and deny other packets with source address of 10.1.1.0/16.
Switch(config)#access-list 20 permit 10.1.1.0 0.0.0.255
Switch(config)#access-list 20 deny 10.1.1.0 0.0.255.255
21.5 access-list(mac extended)
Command:
access-list {deny | permit} {any-source-mac | {host-source-mac } |
{ }} {any-destination-mac | {host-destination-mac } |
{ }} [untagged-eth2 | tagged-eth2 | untagged-802-3 | tagged-802-3]
no access-list
Functions:
Define a extended numeric MAC ACL rule, “no access-list ” command deletes an extended
numeric MAC access-list rule.
Parameters: