PLANET XGS3-24040 - Manual (Page 742)

Commands for Security Function Chapter 2 Commands for 802.1x
41-14
Switch(Config-IP-Ext-Nacl-udpFlow)#deny igmp any any-destination
Switch(Config-IP-Ext-Nacl-udpFlow)#permit udp any host-destination 192.168.0.1 d-port 32
41.20 permit | deny(ip standard)
Command: {deny | permit} {{ } | any-source | {host-source }}
no {deny | permit} {{ } | any-source | {host-source }}
Functions: Create a name standard IP access rule, and “no {deny | permit} {{ } |
any-source | {host-source }}” action of this command deletes this name standard IP access
rule.
Parameters: is the source IP address, the format is dotted decimal notation; <sMask > is the
reverse mask of source IP, the format is dotted decimal notation.
Command Mode: Name standard IP access-list configuration mode
Default: No access-list configured.
Example: Permit packets with source address 10.1.1.0/24 to pass, and deny other packets with source
address 10.1.1.0/16.
Switch(config)# access-list ip standard ipFlow
Switch(Config-Std-Nacl-ipFlow)# permit 10.1.1.0 0.0.0.255
Switch(Config-Std-Nacl-ipFlow)# deny 10.1.1.0 0.0.255.255
41.21 permit | deny(ipv6 extended)
Command:[no]{deny|permit}icmp{{/sPrefixlen>|any|{host}}{
x/dPrefixlen>|any-destination|{host-destination}}[ []] [dscp
] [flow-label ] [time-range ]
[no] {deny | permit} tcp { | any-source | {host-source
}} [s-port { | range }] { |
any-destination | {host-destination }} [d-port { | range
}] [syn | ack | urg | rst | fin | psh] [dscp ] [flow-label ][time-range
]
[no] {deny | permit} udp { | any-source | {host-source
}} [s-port { | range }] { |
any-destination | {host-destination }} [d-port { | range
}] [dscp ] [flow-label ][time-range ]
[no] {deny | permit} {/sPrefixlen> | any-source |
{host-source }} { | any-destination | {host-destination
}} [dscp ] [flow-label ][time-range ]
[no] {deny | permit} {/sPrefixlen> | any-source | {host-source }}
{ | any-destination | {host-destination }} [dscp ]
[flow-label ] [time-range]