User's Manual

Chapter 3 - Operation and Administration Using the CLI NPU Configuration
4Motion 183 System Manual
Destination
IP address
any Indicates that traffic to any
destination IP address is
permitted or denied. any is the
default destination IP address.
npu(config-std-nacl)#
permit ip host 1.1.1.1 any
npu(config-std-nacl)# deny
ip host 1.1.1.1 any
host
<dst-ip-ad
dress>
Indicates that traffic destined to
a specific destination IP address
is permitted or denied.
npu(config-std-nacl)#
permit ip any host 1.1.1.1
npu(config-std-nacl)# deny
ip any host 1.1.1.1
<network-d
st-ip>
<mask>
Indicates that traffic destined to
a particular subnet is to be
permitted or denied.
npu(config-std-nacl)#
permit ip any 1.1.1.0
255.255.255.0
npu(config-std-nacl)# deny
ip any 1.1.1.0
255.255.255.0
Command
Syntax
npu(config-ext-nacl)# permit { ip | ospf | pim | <protocol-type (1-255)>}
{ any | host <src-ip-address> | <src-ip-address> <mask> } { any | host
<dest-ip-addresq> | <dest-ip-address> <mask> }
npu(config-ext-nacl)# deny { ip | ospf | pim | <protocol-type (1-255)>} {
any | host <src-ip-address> | <src-ip-address> <mask> } { any | host
<dest-ip-addresq> | <dest-ip-address> <mask> }
Privilege
Level
10
Syntax
Description
Parameter Description Presence Default
Value
Possible
Values
{ ip | ospf |
pim |
<protocol-type
(1-255)>}
Indicates the type of protocol
for which incoming traffic is
permitted.
Mandatory N/A For details,
refer
Table 3-20
{ any | host
<src-ip-addres
s> |
<src-ip-addres
s> <mask> }
Indicates the source IP
address/subnet for which
incoming traffic is
permitted/denied.
Mandatory N/A For details,
refer
Table 3-20
Table 3-20: Parameters for Configuring Permit/Deny Rules for Traffic from/to Specific IP Addresses
Parameter Description Example