Cisco 4700M Configuration Manual page 32

Configuring ACLs
The keywords, options, and arguments are as follows:
•
•
•
•
•
•
Table 1-2
Protocol Name Protocol Number
ah
eigrp
esp
gre
icmp
igmp
ip
ip-in-ip
ospf
pim
tcp
udp
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
1-8
name—Unique identifier of the ACL. Enter an unquoted text string with no
spaces and a maximum of 64 alphanumeric characters.
line number—(Optional) Specifies the line number position where you want
the entry that you are configuring to appear in the ACL. The position of an
entry affects the lookup order of the entries in an ACL. If you do not configure
the line number of an entry, the ACE applies a default increment and a line
number to the entry and appends it at the end of the ACL.
extended—Specifies an extended ACL. Extended ACLs allow you to specify
the destination IP address and subnet mask and other parameters not available
with a standard ACL.
deny—Blocks connections on the assigned interface.
permit—Allows connections on the assigned interface.
protocol—Name or number of an IP protocol. Enter a protocol name or an
integer from 0 to 255 that represents an IP protocol number from
Supported Protocol Keywords and Numbers
51
88
50
47
1
2
any
4
89
103
6
17
Chapter 1 Configuring Security Access Control Lists
Description
Authentication Header
Enhanced IGRP
Encapsulated Security Payload
Generic Routing Encapsulation
Internet Control Message Protocol
Internet Group Management Protocol
Internet Protocol
IP-in-IP Layer 3 Tunneling Protocol
Open Shortest Path First
Protocol Independent Multicast
Transmission Control Protocol
User Datagram Protocol
Table 1-2.
OL-16202-01