Reference Guide (Supporting software release 4.1.0.0-040GR and later) User guide
Table Of Contents
- Table of Contents
- About This Document
- Introduction
- Common Commands
- User Exec Commands
- Privileged Exec Commands
- Global Configuration Commands
- Crypto-isakmp Instance
- Crypto-group Instance
- Crypto-peer Instance
- Crypto-ipsec Instance
- Crypto-map Instance
- Crypto-trustpoint Instance
- Interface Instance
- Spanning tree-mst Instance
- Extended ACL Instance
- Standard ACL Instance
- Extended MAC ACL Instance
- DHCP Server Instance
- DHCP Class Instance
- RADIUS Server Instance
- Wireless Instance
- RTLS Instance
- SOLE Instance
Brocade Mobility RFS7000-GR CLI Reference Guide 365
53-1001945-01
Extended ACL Config Commands
14
permit
Extended ACL Config Commands
Use this command to permit specific packets.
NOTE
ACLs do not allow DHCP messages to flow by default. Configure an Access Control Entry (ACE) to
allow DHCP messages to flow through.
RFS7000(config-ext-nacl)#permit ip 192.168.1.0/24 192.168.2.0/24
RFS7000(config-ext-nacl)#permit ip any host 255.255.255.255
RFS7000(config-ext-nacl)#
Syntax
permit {ip} {source/source-mask A.B.C.D/MA.B.C.D/M| host sourcehost | any}
{destination/destination-mask | host destinationhost | any} [log]
[rule-precedence access-list-entry precedence]
permit {icmp} {source/source-mask A.B.C.D/M| host sourcehost | any} {destination/
destination-maskA.B.C.D/M | host destinationhost | any} [icmp-type | [icmp-type
icmp-code]] [log] [rule-precedence access-list-entry precedence]
permit{tcp|udp} {source/source-mask A.B.C.D/M| host sourcehost | any} [operator
source-port] {destination/destination-mask | host destinationhost | any}
[operator destination-port] [log] [rule-precedence access-list-entry precedence]