Reference Guide

768 ACL Commands
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC
2+3\new_system_mifs_ARC3_latest\ACL.fm
DELL CONFIDENTIAL – PRELIMINARY 5/21/14 - FOR PROOF ONLY
Syntax
deny protocol {any | {source-prefix/length}{any | destination-
prefix/length} [dscp number | precedence number] [
time-range time-range-
name] [disable-port |log-input ]
deny icmp {any | {source-prefix/length}{any | destination- prefix/length}
{any|icmp-type} {any|icmp-code} [dscp number | precedence number]
[
time-range time-range-name] [disable-port |log-input ]
deny tcp {any | {source-prefix/length} {any | source-port/port-range}}{any
| destination- prefix/length} {any| destination-port/port-range} [dscp
number | precedence number] [match-all list-of-flags] [
time-range time-
range-name] [disable-port |log-input ]
deny udp {any | {source-prefix/length}} {any | source-port/port-
range}}{any | destination- prefix/length} {any| destination-port/port-range}
[dscp number | precedence number] [
time-range time-range-name]
[disable-port |log-input ]
no deny protocol {any | {source-prefix/length}{any | destination-
prefix/length} [dscp number | precedence number] [
time-range time-range-
name] [disable-port |log-input ]
no deny icmp {any | {source-prefix/length}{any | destination-
prefix/length} {any|icmp-type} {any|icmp-code} [dscp number |
precedence number] [
time-range time-range-name] [disable-port |log-input
]
no deny tcp {any | {source-prefix/length} {any | source-port/port-
range}}{any | destination- prefix/length} {any| destination-port/port-range}
[dscp number | precedence number] [match-all list-of-flags] [
time-range
time-range-name] [disable-port |log-input ]
no deny udp {any | {source-prefix/length}} {any | source-port/port-
range}}{any | destination- prefix/length} {any| destination-port/port-range}
[dscp number | precedence number] [
time-range time-range-name]
[disable-port |log-input ]
Parameters
• protocol —The name or the number of an IP protocol. Available protocol
names are: icmp (58), tcp (6) and udp (17). To match any protocol, use the
ipv6 keyword. (Range: 0–255)