Chapter 9: Traffic Control; Acl; Generate Ipv4 Access List - Yamaha L2 Command Reference Manual

216 | Command Reference | Traffic control
Chapter
9
Traffic control

9.1 ACL

9.1.1 Generate IPv4 access list

[Syntax]
access-list ipv4-acl-id [seq_num] action protocol src-info [src-port] dst-info [dst-port] [ack] [fin] [psh]
[rst] [syn] [urg]
no access-list ipv4-acl-id [seq_num] [action protocol src-info [src-port] dst-info [dst-port] [ack] [fin]
[psh] [rst] [syn] [urg]]
[Keyword]
ack
fin
psh
rst
syn
urg
[Parameter]
ipv4-acl-id
seq_num
action
protocol
src-info
: If tcp is specified as the protocol, the ACK flag of the TCP header is specified as a condition.
: If tcp is specified as the protocol, the FIN flag of the TCP header is specified as a condition.
: If tcp is specified as the protocol, the PSH flag of the TCP header is specified as a condition.
: If tcp is specified as the protocol, the RST flag of the TCP header is specified as a condition.
: If tcp is specified as the protocol, the SYN flag of the TCP header is specified as a condition.
: If tcp is specified as the protocol, the URG flag of the TCP header is specified as a condition.
: <1-2000>
ID of IPv4 access list
: <1-65535>
Sequence number. Specifies the position of the entry within the applicable access list.
If the sequence number is omitted, the entry is added to the end of the list. At this time, the new entry
is automatically given a number that is 10 greater than the last existing entry. (If an entry is initially
added without a sequence number, its entry number will be 10.)
: Specifies the action for the access condition
Setting value
deny
permit
: Specifies the applicable protocol type
Setting value
<0-255>
any
tcp
udp
: Specifies the transmission-source IPv4 address that is the condition
Setting value
A.B.C.D E.F.G.H
Description
"Deny" the condition
"Permit" the condition
Description
Protocol number of the IP header
All IPv4 packets
TCP packets
UDP packets
Description
Specifies an IPv4 address (A.B.C.D) with
wildcard bits (E.F.G.H)