CLI Reference Guide-R01

Chapter 10 | Access Control Lists
IPv4 ACLs
– 372 –
[precedence precedence] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
{permit | deny} [icmp | tcp | udp ]
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[icmp-type icmp-type]
[control-flag control-flags flag-bitmask]
[time-range time-range-name]
no {permit | deny} [icmp | tcp
| udp ]
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[icmp-type icmp-type]
[control-flag control-flags flag-bitmask]
protocol-number – A specific protocol number. (Range: 0-255)
source – Source IP address.
destination – Destination IP address.
address-bitmask – Decimal number representing the address bits to match.
host – Keyword followed by a specific IP address.
dscp – DSCP priority level. (Range: 0-63)
precedence – IP precedence level. (Range: 0-7)
sport – Protocol
4
source port number. (Range: 0-65535)
dport – Protocol
4
destination port number. (Range: 0-65535)
port-bitmask – Decimal number representing the port bits to match.
(Range: 0-65535)
icmp-type – The ICMP protocol number. (Range: 0-255)
control-flags – Decimal number (representing a bit string) that specifies flag
bits in byte 14 of the TCP header. (Range: 0-63)
flag-bitmask – Decimal number representing the code bits to match.
time-range-name - Name of the time range. (Range: 1-32 characters)
Default Setting
None
4. Includes TCP, UDP or other protocol types.