User`s manual

268 Asanté IntraCore 36000 Series

Console(config-ext-acl)#permit 10.7.1.1 255.255.255.0 any

Console(config-ext-acl)#

This allows TCP packets from class C addresses 192.168.1.0 to any destination address when set for

destination TCP port 80 (For example, HTTP).

Console(config-ext-acl)#permit 192.168.1.0 255.255.255.0 any destination-port

Console(config-ext-acl)#

This permits all TCP packets from class C addresses 192.168.1.0 with the TCP control code set to “SYN.”

Console(config-ext-acl)#permit tcp 192.168.1.0 255.255.255.0 any control-flag 2

Console(config-ext-acl)#

Related Commands

access-list ip

16.120 permit, deny (MAC ACL)

This command adds a rule to a MAC ACL. The rule filters packets matching a specified MAC source or

destination address (For example, physical layer address), or Ethernet protocol type. Use the no form to

remove a rule.

Syntax Description

[no] {permit | deny}

{any | host source | source address-bitmask}

{any | host destination | destination address-bitmask}

[vid vid vid-bitmask] [ethertype protocol [protocol-bitmask]]

Note: - The default is for Ethernet II packets.

[no] {permit | deny} tagged-eth2

[ethertype protocol [protocol-bitmask]]

[no] {permit | deny} tagged-802.3

tagged-eth2 Tagged Ethernet II packets.

untagged-eth2 Untagged Ethernet II packets.

tagged-802.3 Tagged Ethernet 802.3 packets.

untagged-802.3 Untagged Ethernet 802.3 packets.

any Any MAC source or destination address.