Specifications
SSR Command Line Interface Reference Manual 47
acl permit|deny ip
SSR check only the source and destination addresses, not the port number. Therefore, this
ACL will deny all non-TCP and non-UDP traffic.
To create an ACL to permit Telnet traffic (port 23) from the host 10.23.4.8 to the subnet
10.2.3.0:
The following command creates an ACL to permit all IP traffic. Since none of the ACL
fields are specified, they are all assumed to be wildcards.
The above command is equivalent to the following:
ssr(config)# acl 120 deny ip any any 1-1024 any
ssr(config)# acl 130 permit ip 10.23.4.8 10.2.3.0/24
ssr(config)# acl allip permit ip
ssr(config)# acl allip permit ip any any any any any










