Enterasys X-Pedition XSR CLI Cli Reference Manual page 630

General Security Commands
list#
ent1
ent2
Mode
Global configuration:
Default
No access list defined (that is, all access permitted)
Examples
The following example denies access only for ICMP packets coming from hosts on the three
specified networks. The wildcard bits apply to the host portions of the network addresses. Any
host with a source address that does not match the access list statements will be permitted.
XSR(config)#access-list 100 deny ICMP 192.5.34.0 0.0.0.255
XSR(config)#access-list 100 deny ICMP 128.88.0.0 0.0.255.255
XSR(config)#access-list 100 deny ICMP 36.0.0.0 0.255.255.255
The following example replaces entry 87 with the following entry:
XSR(config)#access-list 123 replace 87 deny ip host 1.2.1.2
The following example removes entries 16, 17 and 18 from ACL 177:
XSR(config)#no access-list 177 16 18
The following example removes the entire ACL 102:
XSR(config)#no access-list 102
The following example moves entries 16 ‐ 18 within an ACL to the beginning of the list:
XSR(config)#access-list 101 move 1 16 18
The example below moves entries 16 ‐ 18 from ACL 144 to its beginning:
XSR(config)#access-list 144 move 1 16 18
The following example moves entry 2 to the end of ACL 133:
XSR(config)#access-list 133 move 999 2
access-list (standard)
This command defines a standard IP Access List (ACL) by numbers, ranging from 1 to 99. ACL
restrictions are applied using the
New and existing ACL entries can be added/replaced in a particular ACL without you having to
rewrite the entire ACL by using the insert/replace number parameters. If neither the insert nor the
replace option is specified, then the new entry is appended to the list. This is noteworthy since ACL
criteria are evaluated in the order displayed by the
16-86 Configuring Security
The standard access list number, ranging from 1 to 99.
Optional single entry number, or the first entry number in the range to be
removed. If unspecified, the entire ACL is removed.
Optional last entry number in the range to be removed.
XSR(config)#
ip access-group
command.
show access-list command.