Access-List Ip Extended Fragment-Auto-Mask; Permit, Deny (Standard Acl) - SMC Networks SMC TigerStack III SMC6824M Management Manual

A C
CCESS ONTROL

access-list ip extended fragment-auto-mask

This command automatically creates extra masks to support fragmented
ACL entries. Use the no form to disable this feature.
Syntax
[no] access-list ip extended fragment-auto-mask
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
If this feature is disabled, fragmented packets will not be matched by any
ACL rule, and will be handled according to the default permit or deny
rule.
Example
Console(config)#tacacs-list ip extended fragment-auto-mask
Console(config)#

permit, deny (Standard ACL)

This command adds a rule to a Standard IP ACL. The rule sets a filter
condition for packets emanating from the specified source. Use the no form
to remove a rule.
Syntax
[no] {permit | deny} {any | source bitmask | host source}
• any – Any source IP address.
• source – Source IP address.
• bitmask – Decimal number representing the address bits to match.
• host – Keyword followed by a specific IP address.
Default Setting
None
4-124
L C
IST OMMANDS