Reference Guide
702
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\ACL.fm
DELL CONFIDENTIAL – PRELIMINARY 2013 - FOR PROOF ONLY
Syntax
deny protocol {any | {
source-prefix/length
}{any |
destination- prefix/length
} [dscp
number
| precedence
number
] [time-range
time-range-name
]
[disable-port | log-input]
deny icmp {any | {
source
-
prefix
/
length
}{any |
destination
-
prefix
/
length
}
{any|
icmp-type
} {any|
icmp-code
} [dscp
number
| precedence
number
]
[time-range
time
-
range
-
name
] [disable-port | log-input]
deny tcp {any | {
source
-
prefix
/
length
} {any |
source
-
port
/
port
-
range
}
}{any |
destination
-
prefix
/
length
} {any|
destination
-
port
/
port
-
range
} [dscp
number
| precedence
number
] [match-all
list-of-flags
] [time-range
time-
range-name
] [disable-port | log-input]
deny udp {any | {
source-prefix/length
}} {any |
source-port/port-range
}
}{any |
destination- prefix/length
} {any|
destination-port/port-range
} [dscp
number
| precedence
number
] [time-range
time-range-name
] [disable-port
| log-input]
Parameters
• protocol
—The name or the number of an IP protocol. Available protocol
names are: icmp (58), tcp (6) and udp (17). To match any protocol use the
IPv6 keyword. (Range: 0–255)
• source-prefix/length
—The source IPv6 network or class of networks about
which to set permit conditions. This argument must be in the form
documented in RFC 3513 where the address is specified in hexadecimal
using 16-bit values between colons.
• destination-prefix/length
—The destination IPv6 network or class of
networks about which to set permit conditions. This argument must be in
the form documented in RFC 3513 where the address is specified in
hexadecimal using 16-bit values between colons.
• dscp number
—Specifies the DSCP value. (Range: 0–63)
• precedence number
—Specifies the IP precedence value.
• icmp-type
—Specifies an ICMP message type for filtering ICMP packets.
Enter a number or one of the following values: destination-unreachable
(1), packet-too-big (2), time-exceeded (3), parameter-problem (4), echo-