Commands for Security Function Chapter 6 Commands for TACACS+
{host-source-mac}|{}}
{any-destination-mac|{host-destination-mac }|{}}icmp
{{}|any-source|{host-source}}
{{}|any-destination|
{host-destination}}[ []] [precedence
] [tos ][time-range]
access-list{deny|permit}{any-source-mac|
{host-source-mac}|{}}
{any-destination-mac|{host-destination-mac }|{}}igmp
{{}|any-source|{host-source}}
{{}|any-destination|
{host-destination}} [] [precedence ] [tos
][time-range]
access-list {deny|permit}{any-source-mac| {host-source-mac
}|{ }}{any-destination-mac| {host-destination-mac
}|{ }}tcp {{ }|any-source|
{host-source }}[s-port{ > | range }]
{{ <destination> <destination-wildcard> } | any-destination | {host-destination
<destination-host-ip> }} [d-port { <port3> | range <dPortMin> > }]
[ack+fin+psh+rst+urg+syn] [precedence ] [tos ] [time-range
]
access-list {deny|permit}{any-source-mac| {host-source-mac
}|{ }}{any-destination-mac| {host-destination-mac
}|{ }}udp {{ }|any-source|
{host-source }}[s-port{ > | range }]
{{ > <destination-wildcard> }|any-destination| {host-destination
}}[d-port{ | range > }]
[precedence ] [tos ][time-range ]
access-list {deny|permit}{any-source-mac| {host-source-mac
}|{ }} {any-destination-mac|{host-destination-mac
}|{ }} {eigrp|gre|igrp|ip|ipinip|ospf|{ }}
{{ }|any-source|{host-source }}
{{ }|any-destination| {host-destination
}} [precedence ] [tos ][time-range
]
Functions:
Define a extended numeric MAC-IP ACL rule, ‘No’ command deletes a extended numeric MAC-IP
ACL access-list rule.
