Enterasys C3G124-24 Configuration Manual page 909

access-list (extended)
source
source-wildcard
eq port
destination
destination-wildcard (Optional) Specifies the bits to ignore in the destination address. A 0
insert | replace
entryno
move destination
source1 source2
precedence
precedence
tos tos tosmask
dscp dscp
assign-queue
queue-id
Specifies the network or host from which the packet will be sent. Valid
options for expressing source are:
• IP address or range of addresses (A.B.C.D)
• any - Any source host
• host source - IP address of a single source host
(Optional) Specifies the bits to ignore in the source address. A 0 indicates the
address bits that must be considered (matched), while a 255 indicates the
bits that can be ignored.
(Optional) Applies access rules to TCP or UDP source and/or destination
port numbers equal to the specified port number.
Port numbers can range from 0 to 65535.
Note: This parameter is not available when you specify the icmp protocol.
Specifies the network or host to which the packet will be sent. Valid options
for expressing destination are:
• IP address (A.B.C.D)
• any - Any destination host
• host source - IP address of a single destination host
indicates the address bits that must be considered (matched), while a 255
indicates the bits that can be ignored.
(Optional) Inserts this new entry before a specified entry in an existing
ACL, or replaces a specified entry with this new entry.
(Optional) Moves a sequence of access list entries before another entry.
Destination is the number of the existing entry before which this new entry
will be moved. Source1 is a single entry number or the first entry number in
the range to be moved. Source2 (optional) is the last entry number in the
range to be moved. If source2 is not specified, only the source1 entry will be
moved.
(Optional) Specifies an IP precedence value to match. The value of
precedence can range from 0 to 7.
(Optional) Specifies a Type of Service (ToS) value to match. The value of tos
must be a two-digit hexadecimal number in the range of 0x00 to 0xff
specifying the ToS bits. The value of tosmask must be a two-digit
hexidecimal number in the range of 0x00 to 0xff specifying the ToS mask.
(Optional) Specifies a DiffServe Code Point (DSCP) value to match against
this packet's DSCP code. Valid values are a number from 0 to 63 or one of
the following keywords:
• af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, af44, –
Assured Forwarding
• be / cs0 – best effort
• cs1 - cs7 – Class Selector
• ef – Expedited Forwarding
(Optional) Specifies the queue to which a packet matching the permit rule
will be assigned. Valid values for queue-id are from 0 to 5.
Configuring Access Control Lists
Enterasys C3 Configuration Guide 34-7