Dell PowerConnect 5500 Series System User's Manual page 116

FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Maintenance Projects\Dell
Table 8-5. IP-Based ACE CLI Commands (Continued)
CLI Command
deny protocol {any|source-ip-address
source-wildcard} {any|destination-ip-
address destination-wildcard} [dscp
number|precedence number] [time-range
time-range-name] [disable-port|log-input]
deny icmp {any|source-ip-address source-
wildcard} {any|destination-ip-address
destination-wildcard{any|icmp-type}
{any|icmp-code} [dscp number|precedence
number] [time-range time-range-name]
[disable-port|log-input]
deny igmp {any|source-ip-address source-
wildcard} {any|destination-ip-address
destination-wildcard}[igmp-type] [dscp
number|precedence number] [time-range
time-range-name] [disable-port|log-input]
deny tcp {any|source-ip-address source-
wildcard} {any|source-port|port-
range}{any|destination-ip-address
destination-wildcard} {any|destination-
port/port-range } [dscp number|precedence
number] [match-all list-of-flags] [time-
range time-range-name] [disable-port|log-
input]
deny udp {any|source-ip-address source-
wildcard} {any|source-port|port-range}
{any|destination-ip-address destination-
wildcard} {any|destination-port|port-range
} [dscp number|precedence number] [match-
all time-range-name] [time-range time-
range-name] [disable-port|log-input]
The following is an example of some of the CLI commands:
console(config)# ip access-list extended server
console(config-ip-al)# permit ip 1.1.1.0 0.0.0.255
1.1.2.0 0.0.0.0
D E L L C O N F I D E N T I A L – P R E L I M I N A R Y 1 0 / 3 0 / 1 3 - F O R P R O O F O N LY
116
Dell PowerConnect 55xx Systems User Guide
Contax\sources\CxU_Switching_NetworkSecurity.fm
Description
Sets deny conditions
for IPv4 access list (in
access list
configuration mode).