CLI Guide

Table Of Contents
permit Enter the keyword permit to configure a filter to forward packets meeting this
criteria.
ip-protocol-
number
Enter a number from 0 to 255 to filter based on the protocol identified in the IP
protocol header.
icmp Enter the keyword icmp to configure an ICMP access list filter.
ip Enter the keyword ip to configure a generic IP access list. The keyword ip
specifies that the access list permits all IP protocols.
tcp Enter the keyword tcp to configure a TCP access list filter.
udp Enter the keyword udp to configure a UDP access list filter.
source
Enter an IP address in dotted decimal format of the network from which the packet
was received.
mask
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any Enter the keyword any to specify that all routes are subject to the filter.
host
ip-address
Enter the keyword host and then enter the IP address to specify a host IP address
or hostname.
operator
(OPTIONAL) Enter one of the following logical operands:
eq = equal to
neq = not equal to
gt = greater than
lt = less than
range = inclusive range of ports (you must specify two ports for the port
parameter.)
portnumber
(OPTIONAL) Enter the application layer port number. Enter two port numbers if
you are using the range logical operand. The range is from 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP-DATA and FTP
25 = SMTP
169 = SNMP
portname
(OPTIONAL) Enter the logical name of the protocol.
The following logical names are supported in TCP:
bgp Border Gateway Protocol (179)
chargen Character generator (19)
cmd Remote commands (rcmd, 514)
daytime Daytime (13)
discard Discard (9)
domain Domain Name Service (53)
drip Dynamic Routing Information Protocol
(3949)
echo Echo (7)
exec Exec (512)
finger Finger (79)
ftp File Transfer Protocol (21)
ftp-data FTP data connections (20)
gopher Gopher (70)
hostname NIC hostname server (101)
ident Ident Protocol (113)
irc Internet Relay Chat (194)
klogin Kerberos login (543)
kshell Kerberos shell (544)
login Login (rlogin, 513)
lpd Printer service (515)
nntp Network News Transport Protocol (119)
pim-rp-disc PIM-RP-DISC(496)
214 Access Control Lists (ACL)