Manual

GigaX3124 Layer3 Switch CLI Command Reference
95
Description This command species one or more conditions denied or
permitted to decide if the packet is forwarded or dropped.
Examples ASUS(cong)# access-list 100 permit ip 1.1.1.1 0.0.0.0 1.1.1.3
0.0.0.0
13.5 access-list (<100-199>|<2000-2699>)
(deny|permit) (tcp|udp) IPADDR MASK
[eq] [<0-65535>] IPADDR MASK [eq]
[<0-65535>] [IFNAME]
Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)
IPADDR MASK [eq] [<0-65535>] IPADDR MASK [eq]
[<0-65535>] [IFNAME]
Parameters access-list Add an access list entry
<100-199> Extended IP access-list number
<2000-2699> Extended IP access-list number (expanded
range)
permit Specify packets to forward
deny Specify packets to reject.
tcp Transmission Control Protocol
udp User Datagram Protocol
IPADDR Source address
MASK Source wildcard bits
eq Match only packets on a given port numbe
<0-65535> Port number
IPADDR Destination address
MASK Destination wildcard bits
eq Match only packets on a given port numbe
<0-65535> Port number
[IFNAME] Egress interface name
Command Mode Global conguration mode
No/clear no access-list (<100-199>|<2000-2699>) (deny|permit)