Specifications

14-10 Security ACL Commands
Parameters
acl‐name SecurityACLname.ACLnamesmustbeuniquewithintheRoamAbout
Switch,muststartwithaletter,andarecase‐insensitive.SpecifyanACL
nameofupto32ofthefollowingcharacters:
•LettersathroughzandAthroughZ
•Numbers0through9
•Hyphen(‐),underscore(_),and
period(.)
Enterasys Networksrecommendsthatyoudonotusethesamenamewith
differentcapitalizationsforACLs.Forexample,donotconfiguretwo
separateACLswiththenamesacl_123andACL_123.
Note: In an ACL name, do not include the term all, default-action, map, help, or
editbuffer.
permit Allowstrafficthat matchestheconditionsintheACE.
coscos Forpermittedpackets, aclass‐of‐service(CoS)levelforpackethandling.
Specifyavaluefrom0through7:
• 1or2—Background.PacketsarequeuedinAPforwardingqueue4.
• 0or3—Besteffort.PacketsarequeuedinAP
forwardingqueue3.
• 4or5—Video.PacketsarequeuedinAPforwardingqueue2.
UseCoSlevel4or5forvoiceoverIP(VoIP)packetsotherthanSpectraLink
VoicePriority(SVP).
• 6or7—Voice.Packetsarequ euedinAPforwardingqueue1.
Use6or7onlyforVoIPphones
thatuseSVP,notforothertypesoftraffic
deny BlockstrafficthatmatchestheconditionsintheACE.
protocol IPprotocolbywhichtofilterpackets:
• ip
• tcp
• udp
• icmp
•Aprotocolnumberbetween0and255.
(ForacompletelistofIPprotocolnamesandnumbers,seewww.iana.org/
assignments/protocol‐numbers.)
source‐
ip‐addrmask IPaddressand wildcardmaskofthenetworkorhostfromwhichthepacket
isbeingsent.Specifybothaddressandmaskindotteddecimalnotation.For
moreinformation,see“WildcardMasks”onpage 1‐3.