ECS2020 Series CLI Reference Guide-R04

extended ip access-list deny|permit

Under an extended ip access-list, this command configures the deny or permit rules.

ip access-list extended {10-19}

[ace_id] {deny|permit} {ip|tcp|udp} {any|host|sip} [eq] {any|host|dip} [eq]

ip access-list extended {10-19}

no {ace_id}

Null

ACL configuration mode

Configuration ACE

ip access-list extended 10

permit ip any any

parameter

description

ip|tcp|udp

protocol type

any

any source IP address

host

host IP address

sip

assignable source IP address and mask

dip

assignable dest IP address and mask

TCP/UDP port filtering

ace_id

ACE number(0-9)

Command

Description

Show access-list

Displays the access control list information.

Default

Mode

Example

Usage