Table of Contents
Advertisement
ACL Commands
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
2.2
permit ( IP )
Use the permit IP Access-list Configuration mode command to set permit
conditions for an IPv4 access list (ACL). Permit conditions are also known as
access control entries (ACEs). Use the no form of the command to remove the
access control entry.
Syntax
protocol
permit
{any
destination-wildcard
time-range-name
[time-range
[log-input]
icmp
| source source-wildcard
permit
{any
| icmp-type
[any
] [any
number
precedence
] [time-range
[log-input]
igmp
| source source-wildcard
permit
{any
destination-wildcard
number
precedence
] [time-range
[log-input]
| source source-wildcard
permit tcp {any
destination destination-wildcard
priority
number |
] [dscp
time-range-name
]
[log-input]
| source source-wildcard
permit udp {any
destination destination-wildcard
priority
number |
] [dscp
[log-input]
protocol
no permit
{any
destination-wildcard}
time-range-name
]
[log-input]
icmp
| source source-wildcard
no permit
{any
destination-wildcard
precedence
number
][time-range
| source source-wildcard
priority
} [ace-priority
]
| icmp-code
]] [ace-priority
time-range-name
igmp-type
}[
] [ace-priority
time-range-name
} {any
} {any
| d estination-port/port-range
number
precedence
} {any
| d estination-port/port-range
} {any
number
precedence
| source source-wildcard
number |
[dscp
precedence
| icmp-type
} [any
] [any
time-range-name
| destination
} {any
number | precedence number
] [dscp
| destination destination-wildcard
} {any
priority
] [dscp
]
| destination
} {any
priority
number |
] [dscp
]
| s ource-port/port-range
list-of-flags
] [match-all
| s ource-port/port-range
time-range-name
] [time-range
| destination
} {any
number
][time-range
| destination
} {any
| icmp-code
]] [dscp
]
2
]
}
number |
|
}{any
} [ace-priority
] [time-range
|
} {any
} [ace-priority
]
number |
48
Advertisement
Table of Contents
