Cisco 300 Series Cli Manual page 116

ACL Commands
OL-32830-01 Command Line Interface Reference Guide
igmp {any | source source-wildcard} {any | destination
deny
destination-wildcard}[igmp-type][
number] [
time-range
{any | source source-wildcard} {any| s ource-port/port-range}{any |
deny tcp
destination destination-wildcard} {any| d estination-port/port-range} [
priority] [dscp number | precedence number] [match-all list-of-flags][
time-range-name] [disable-port | l og-input ]
{any | source source-wildcard} {any| s ource-port/port-range} {any |
deny udp
destination destination-wildcard} {any| d estination-port/port-range} [
priority] [dscp number | precedence number] [
[disable-port | l og-input ]
no deny protocol {any | source source-wildcard} {any | destination
destination-wildcard} [dscp number | precedence number] [
time-range-name] [disable-port | l og-input ]
icmp {any | source source-wildcard} {any | destination
no deny
destination-wildcard} [any | icmp-type] [any | icmp-code]] [dscp number |
precedence number][
igmp {any | source source-wildcard} {any | destination
no deny
destination-wildcard}[igmp-type] [dscp number | precedence number] [
time-range-name] [disable-port | l og-input ]
{any | source source-wildcard} {any| s ource-port/port-range}{any |
no deny tcp
destination destination-wildcard} {any| d estination-port/port-range} [dscp number |
precedence number] [match-all list-of-flags] [
[disable-port | l og-input ]
{any | source source-wildcard} {any| s ource-port/port-range} {any |
no deny udp
destination destination-wildcard} {any| d estination-port/port-range} [dscp number |
precedence number] [
Parameters
•
protocol—The name or the number of an IP protocol. Available protocol
names: icmp, igmp, ip, tcp, egp, igp, udp, hmp, rdp, idpr, ipv6, ipv6:rout,
ipv6:frag, idrp, rsvp, gre, esp, ah, ipv6:icmp, eigrp, ospf, ipinip, pim, l2tp, isis.
To match any protocol, use the Ip keyword. (Range: 0–255)
•
source
—Source IP address of the packet.
•
source-wildcard
1s in the bit position that you want to be ignored.
•
destination —Destination IP address of the packet.
ace-priority
time-range-name] [disable-port | l og-input ]
time-range-name] [disable-port | l og-input ]
time-range
time-range-name] [disable-port | l og-input ]
time-range
—Wildcard bits to be applied to the source IP address. Use
priority] [dscp number | precedence
time-range-name]
time-range
time-range
time-range-name]
time-range
4
ace-priority
time-range
ace-priority
time-range
116