Access-List (Extended) - Alcatel-Lucent OmniAccess 700 CLI Command Reference Manual

Left running head:
Chapter name (automatic)
Protocol Independent Features
- (
ACCESS LIST EXTENDED
access-list {<100-199>|<2000-2699>} {deny|permit} {<0-255>
|gre|icmp|ipinip|pim|rsvp|tcp|udp} {source-ip-address [source-
network-number]|source-ip-address/prefix-length|any|host
<source-host-ipaddress>} {destination-ip-address [destination-
network-number]|destination-ip-address/prefix-length|any|host
<destination-host-ipaddress>}[log]
D
ESCRIPTION
This command is used to configure a Extended Access-list. Extended Access-list
uses both source IP address and destination IP address.
P
ARAMETERS
Parameter
<100-199>|<2000-2699>
0-255
deny
permit
gre|icmp|ipinip|pim|rsv
p|tcp|udp
source-ip-address
[source-network-number]
source-ip-address/
prefix-length
any
host
source-host-ipaddress
destination-ip-address
[destination-network-
number]
destination ip-address/
prefix-length
destination-host-
ipaddress
log
336
Beta
)
Access list number.
IP protocol number. Access list is applied only If
packet belongs to the specified protocol number.
Denies access for matching conditions.
Permits access for matching conditions.
Access list is applied only If packet belongs to the
specified protocol.
Source IP address network.
Source IP address network.
From any network.
Specify single host IP address.
Source IP address.
Destination IP address network.
Destination IP address network.
Destination IP address.
If access list is matched, logs the message.
Alcatel-Lucent
OmniAccess 700 CLI Command Reference Guide
Description
Beta