Create Access-List - Extreme Networks ExtremeWare Command Reference Manual

create access-list

create access-list <name> access-mask <access-mask name> {dest-mac
<dest_mac} {source-mac <src_mac>} {vlan <name>} {ethertype [IP | ARP |
<hex_value>]} {tos <ip_precedence> | code-point <code_point>} {ipprotocol
[tcp | udp | icmp | igmp | <prococol_num>]} {dest-ip <dest_IP>/<mask
length>} {dest-L4port <dest_port>} {source-ip <src_IP>/<mask length>}
{source-L4port <src_port> [permit {qosprofile <qosprofile>} {set code-point
<code_point>} {set dot1p <dot1p_value} | permit-established |
deny]{vlan-pri}{vlan-pri-2bits}
Description
Creates an access list on an "e" series switch.
NOTE
This command is available only on the "e" series switches. To create access lists for "i" series switches,
use the following four commands:
create access-list icmp destination source
create access-list ip destination source ports
create access-list tcp destination source ports
create access-list udp destination source ports
Syntax Description
name
access-mask
dest-mac
source-mac
vlan
ethertype
tos
code-point
iprotocol
dest-ip
source-ip
dest-L4port
source-L4port
icmp-type
icmp-code
egressport
ports
permit
qosprofile
ExtremeWare 7.5 Command Reference Guide
Specifies the name of the access list.
Specifies the name of the associated access mask.
Specifies the destination MAC address.
Specifies the source MAC address.
Specifies the VLANid.
Specifies the Ethernet type field.
Specifies a 3-bit precedence field within the IP ToS field. Valid entries are from 0 to 7.
Specifies a 6-bit DiffServ code point. Valid entries are from 0 to 63.
Specifies the IP protocol.
Specifies the destination IP address.
Specifies the source IP address.
Specifies the destination TCP/UDP port.
Specifies the source TCP/UDP port.
Specifies the ICMP type.
Specifies the ICMP code.
Specifies the egress port.
Specifies one or more ingress ports.
Specifies to forward the packet.
Specifies the priorities for using QoS profiles.
create access-list
931