Table of Contents
Advertisement
T
e
l
n
e
t
C
T
e
l
n
e
t
C
Use this command to create an IPv4 access list (ACL) which performs classification on layer 3
fields and enters ip-access configuration mode.
S
y
n
t
a
x
S
y
n
t
a
x
ip acl
ip address
ip conflict
ip default-gateway
ip dhcp
ip dns
ip forcedhttps
ip http
ip https
ip igmp
ip source
ip ssh
ip telent
D
D
e
e
s
s
c
c
r
r
i
i
p
p
Syntax Items
ip acl
188
o
m
m
a
n
d
:
i
p
o
m
m
a
n
d
:
i
p
I
t
e
m
s
I
t
e
m
s
t
t
i
i
o
o
n
n
Description
acl <NAME> - Set the name of the access list (ACL) based on IPv4.
To configure detailed settings, enter the name of ACL to access into
next level.
<config>#ip acl <NAME>
Then, available sub-command includes:
<config-ip-acl>#deny
<config-ip-acl>#do
<config-ip-acl>#end
<config-ip-acl>#exit
<config-ip-acl>#permit
<config-ip-acl>#sequence
<config-ip-acl>#show
Use the "deny" command to create deny rules for the IPv4 access list.
<0-255/egp/hmp/icmp/igp/ipinip/ipv6 /ipv6:frag /ipv6:icmp
/ipv6:rout / ip / l2tp /ospf /pim / rdp / rsvp /tcp /udp > - Specify the
IP protocol number or enter the name of the protocol.
<A.B.C.D>/<A.B.C.D> <A.B.C.D>/<A.B.C.D> - Specify the source and
destination IPv4 addresses and subnet masks.
dscp <0-63> - Set the DSCP filtering by specifying a value for DSCP.
precedence <0-7> - Set the cos value and the cos mask for a packet.
shutdown – Disable the Ethernet interface.
any – Any IP address (as source or destination).
Related Syntax:
<config-ip-acl >#deny <0-255> <A.B.C.D>/<A.B.C.D>
<A.B.C.D>/<A.B.C.D> dscp <0-63>
<config-ip-acl >#deny <0-255> <A.B.C.D>/<A.B.C.D>
<A.B.C.D>/<A.B.C.D> dscp <0-63> shutdown
<config-ip-acl >#deny <0-255> <A.B.C.D>/<A.B.C.D>
<A.B.C.D>/<A.B.C.D> precedence <0-7>
<config-ip-acl >#deny <0-255> <A.B.C.D>/<A.B.C.D>
<A.B.C.D>/<A.B.C.D> precedence <0-7> shutdown
<config-ip-acl >#deny <0-255> any <A.B.C.D>/<A.B.C.D> dscp
<0-63>
VigorSwitch P1085 User's Guide
Advertisement
Table of Contents
