beautypg.com

19 permit | deny(ip standard), 20 permit | deny(ipv6 standard), Permit – PLANET WGSW-50040 User Manual

Page 330: Deny, Ip standard, Standard

background image

Commands for Security Function Chapter 6 Commands for TACACS+

32

21.19 permit | deny(ip standard)

Command:

{deny | permit} {{ } | any-source | {host-source }}

no {deny | permit} {{ } | any-source | {host-source }}

Functions:

Create a name standard IP access rule, and “no {deny | permit} {{ } |

any-source | {host-source }}” action of this command deletes this name standard IP

access rule.

Parameters:

is the source IP address, the format is dotted decimal notation;

<sMask > is the reverse mask of source IP, the format is dotted decimal notation.

Command Mode:

Name standard IP access-list configuration mode

Default:

No access-list configured.

Example:

Permit packets with source address 10.1.1.0/24 to pass, and deny other packets with source

address 10.1.1.0/16.

Switch(config)# access-list ip standard ipFlow

Switch(Config-Std-Nacl-ipFlow)# permit 10.1.1.0 0.0.0.255

Switch(Config-Std-Nacl-ipFlow)# deny 10.1.1.0 0.0.255.255

21.20 permit | deny(ipv6 standard)

Command:

[no] {deny | permit} {{/sPrefixlen>} | any-source | {host-source }}

Function:

Create a standard nomenclature IPv6 access control rule; the “no” form of this command deletes

the nomenclature standard IPv6 access control rule.

Parameter:

is the prefix of the source IPv6 address,