Reference Guide

692
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\ACL.fm
DELL CONFIDENTIAL – PRELIMINARY 2013 - FOR PROOF ONLY
permit ( IP )
Use the permit IP Access-list Configuration mode command to set permit
conditions for IPv4 access list.
Syntax
permit protocol {any | source source-wildcard } {any | destination
destination-wildcard
} [ dscp number | precedence number ] [time-range
time-range-name ]
permit
icmp {any | source source-wildcard } {any | destination destination-
wildcard
} [any | icmp-type ] [any | icmp-code ]] [ dscp number | precedence
number
] [time-range time -range-name ]
permit
igmp {any | source source-wildcard } {any | destination destination-
wildcard
} [ dscp number | precedence number ] [time-range time-range-
name
]
permit tcp {any | source
source-wildcard } {any| source-port/port-range }{any
| destination
destination-wildcard } {any| destination-port/port-range } [dscp
number | precedence number ] [match-all list-of-flags ] [time-range time-
range-name
]
permit udp {any | source
source-wildcard} {any| source-port/port-range }
{any | destination
destination-wildcard } {any| destination-port/port-range }
[dscp
number | precedence number ] [match-all time-range-name ] [time-
range
time-range-name ]
Parameters
• protocol —The name or the number of an IP protocol. Available protocol
names icmp, igmp, ip, tcp, egp, igp, udp, hmp, rdp, idpr, ipv6, ipv6:rout,
ipv6:frag, idrp, rsvp, gre, esp, ah, ipv6:icmp, eigrp, ospf, ipinip, pim, l2tp,
isis. To match any protocol use the IP keyword.(Range: 0–255)
• source —Source IP address of the packet.
• source-wildcard —Wildcard bits to be applied to the source IP address.
Use ones in the bit position that you want to be ignored.
• destination —Destination IP address of the packet.
• destination-wildcard —Wildcard bits to be applied to the destination IP
address. Use ones in the bit position that you want to be ignored.