Switch User Manual

access-list (extended)
SecureStack C3 Configuration Guide 26-85
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Parameters
Defaults
Ifinsert,replace,ormovearenotspecified,thenewentrywillbeappendedtotheaccesslist.
Ifsource2isnotspecifiedwithmove,onlyoneentrywillbemoved.
access‐list‐number
[entryno[entryno]]
Specifiesanextendedaccesslistnumber.Validvaluesarefrom100to199.
Whenusingthenoaccess‐listcommand,youcandeleteawholeaccess‐list,
oronlyspecificentries inthelistwiththeoptionalentrynoparameter.
Specifyarangeofentriesbyenteringthestartandendentrynumbers.
deny|permit Deniesorpermitsaccessifspecif iedconditionsaremet.
protocol Specifies
anIPprotocolforwhichtodenyorpermitaccess.Validvalues
andtheircorrespondingprotocolsare:
•ip‐AnyInternetprotocol
• udp‐UserDatagramProtocol
• tcp‐TransmissionControl Protocol
• icmp‐InternetControlMessageProtocol
source Specifiesthenetworkorhostfromwhichthepacketwillbesent.Valid
optionsforexpressing
sourceare:
•IPaddressorrangeofaddresses(A.B.C.D)
• any‐Anysourcehost
• hostsource‐IPaddressofasinglesourcehost
source‐wildcard (Optional)Specifiesthebitstoignoreinthesourceaddress.
eqport (Optional)AppliesaccessrulestoTCPorUDPsourceand/ordestination
portnumbersequaltothespecified
portnumber.
Portnumberscanrangefrom0to65535.
Note: This parameter is not available when you specify the icmp protocol.
destination Specifiesthenetworkorhosttowhichthepacketwillbesent.Validoptions
forexpressingdestinationare:
•IPaddress(A.B.C.D)
• any‐Anydestinationhost
• hostsource‐IPaddressofasingledestinationhost
destination‐wildcard (Optional)Specifiesthebitstoignoreinthedestinationaddress.
insert|replace
entryno
(Optional)Inserts
thisnewentrybeforeaspecifiedentryinanexisting
ACL,orreplacesaspecifiedentrywiththisnewentry.
movedestination
source1source2
(Optional)Movesasequenceofaccesslistentriesbeforeanotherentry.
Destinationisthenumberoftheexistingentrybeforewhichthisnewentry
willbemoved.Source1
isasingleentrynumberorthefirstentrynumberin
therangetobemoved.Source2(optional)isthelastentrynumberinthe
rangetobemoved.Ifsource2isnotspecified,onlythesource1entrywillbe
moved.