Specifications

Security Configuration Command Set
Configuring Access Lists
Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide 14-107
Command Syntax of the “no” Form
The “no” form of this command removes the defined access list or entry:
no access-list access-list-number [entry]
Command Type
Router command.
Command Mode
Global configuration: Matrix>Router(config)#
Command Defaults
• If insert, replace, or move are not specified, the new entry will be appended
to the access list.
• If source2 is not specified with move, only one entry will be moved.
• If icmp-type and icmp-code are not specified, ICMP parameters will be applied
to all ICMP message types.
icmp-type (Optional) Filters ICMP frames by ICMP message type. The
type is a number from 0 to 255.
icmp-code (Optional) Further filters ICMP frames filtered by ICMP
message type by their ICMP message code. The code is a
number from 0 to 255.
operator port (Optional) Applies access rules to TCP or UDP source or
destination port numbers. Possible operands include:
• lt port - Match only packets with a lower port number.
• gt port - Match only packets with a greater port number.
• eq port - Match only packets on a given port number.
• neq port - Match only packets not on a given port
number.
• range min-sport max-sport - Match only packets in the
range of source ports
• range min-dport max-dport - Match only packets in the
range of destination ports.
established (Optional) Applies TCP restrictions to established
connections only.