Motorola RFS7000 Reference Manual page 453

permit{tcp|udp}
{source/source-mask |
host source | any}
[operator source-port]
{destination/destination-
mask | host destination |
any}
[operator destination-port]
[log]
[rule-precedence access-
list-entry precedence]
Use with the permit
packets
• permit – Allows TCP or UDP packets
• {tcp|udp} – Specifies TCP or UDP as the protocol
• {source/source-mask | host source | any} – The
source is the source IP address of the network or host
(in dotted decimal format). The source-mask is the
network mask. For example, 10.1.1.10/24 indicates
the first 24 bits of the source IP are used for
matching.
• any is an abbreviation for a source IP of 0.0.0.0
with the source-mask bits being equal to 0
• host is an abbreviation for exact source (A.B.C.D)
with the source-mask bits being equal to 32
• [operator source-port] – Valid only for TCP or UDP
protocols. Valid values are eq and range
• range – Specifies the protocol range (starting
and ending protocol numbers)
• port – Sets the valid port number
• {destination/destination-mask | host destination |
any} – Sets the destination host IP address or
destination network address.
• [operator destination-port] – Specifies the
destination port.
• [log] – Generates log messages when the packet
coming from the interface matches the ACL entry. Log
messages are generated only for router ACLs.
• [rule-precedence access-list-entry precedence] –
Sets an integer value between 1-5000. This value
sets the rule precedence in the ACL.
Extended ACL Instance
command to allow TCP or UDP
14-21