Permit - Motorola RFS6000 Reference Manual

14-22 Motorola RF Switch CLI Reference Guide

14.1.8 permit


Extended ACL Config Commands
Permits specific packets.
Supported in the following platforms:
• RFS7000
• RFS6000
• RFS4000
Syntax
permit[icmp|ip|tcp|upd|proto]
permit icmp [<source-IP/Mask>|any|host <ip>] [<dest-IP/
Mask>|any|host <IP>] {<ICMP-type> {<ICMP-code>}} {log}
{rule-precedence <1-5000>]}
permit ip [<source-IP/Mask>|any|host <IP>] [<dest-IP/
mask>|any|host <IP>] {log} {rule-precedence <1-5000>}
permit [tcp|udp] [<source-ip/mask>|any|host <IP>] {eq
<source-port>|range <starting-source-port> <ending-source-
port>} [<dest-IP/Mask|any|host <IP>] {eq <source-port>}
{range <starting-source-port> <ending-source-port>} {log}
{rule-precedence <1-5000>}
permit proto [<1-254>|WORD|eigrp|gre|igmp
|igp|ospf|vrrp][<source-IP/Mask>|any|host <IP>][<dest-IP/
Mask>|any|host <IP>] {log} {rule-description <WORD>
|rule-precedence <1-5000>}
NOTE: ACLs do not allow DHCP messages to flow by default. Configure
an Access Control Entry (ACE) to allow DHCP messages to flow through.
RFSwitch(config-ext-nacl)#permit ip
xxx.xxx.xxx.xxx/x 192.168.2.0/24
RFSwitch(config-ext-nacl)#permit ip any host
xxx.xxx.xxx.xxx
RFSwitch(config-ext-nacl)#