Permit - Dell Z9500 Command Reference Manual

Version
6.5.3.0

permit

Configure a permit rule. A permit rule excludes the matching packets from PBR classification and routes
them using conventional routing.
Z9500
Syntax
permit {ip-protocol-number | protocol-type} {source mask | any
| host ip-address} {destination mask | any | host ip-address}
[bit] [operators]
To remove the rule, use one of the following:
•
•
Parameters
ip-protocol-
number
protocol-type
source
mask
any
host ip-address
destination
bit
1426
Description
Introduced on the E-Series ExaScale.
If you know the filter sequence number, use the no seq sequence-number
syntax command.
You can also use the no permit {ip-protocol-number | protocol-
type} {source mask | any | host ip-address} {destination
mask | any | host ip-address} [bit] [operators] command.
Enter a number from 0 to 255 for the protocol identified in
the IP protocol header.
Enter one of the following keywords as the protocol type:
• icmp for internet control message protocol
• ip for any internet protocol
• tcp for transmission control protocol
• udp for user datagram protocol
Enter the IP address of the network or host from which the
packets were sent.
Enter a network mask in /prefix format (/x).
Enter the keyword any to specify that all traffic is subject to
the filter.
Enter the keyword host then he IP address to specify a host
IP address.
Enter the IP address of the network or host to which the
packets are sent.
(OPTIONAL) For the TCP protocol type only, enter one or a
combination of the following TCP flags:
Policy-based Routing (PBR)