Planet WGSW-28040 Command Manual page 58

[dscp VALUE]
[precedence
VLAUE]
icmp-type
icmp-code
igmp-type
l4-source-port
l4-destination-port
match-all
[shutdown]
Mode:
IP ACL Configuration
Usage Guide:
Use the deny command to add deny conditions for an IP ACE that drop those packets hit the ACE. The "sequence"
also represents hit priority when ACL bind to an interface. An ACE not specifies "sequence" index would assign a
sequence index which is the largest existed index plus 20. If packet content can match more than one ACE, the
lowest sequence ACE is hit. An ACE can not be added if has the same conditions as existed ACE. Use "shutdown"
to shutdown interface while ACE hit.
Example:
The example shows how to add an ACE that denies packets with source IP address 192.168.1.80. You can verify
settings by the following show acl command
Switch(config)# ip acl iptest
Switch(ip-al)# deny ip 192.168.1.80/255.255.255.255 any
Switch(ip-al)# show acl
IP access list iptest
sequence 1 deny ip 192.168.1.80/255.255.255.255 any
(Optional) Specify the DSCP of packet.
(Optional) Specify the IP precedence of packet.
Specify ICMP message type for filtering ICMP packet. Enter a type name of list or a
number of ICMP message type.
Specify ICMP message code for filtering ICMP packet.
Specify IGMP type for filtering IGMP packet. Enter a type name of list or a number of
IGMP type.
Specify TCP/UDP source port of for filtering TCP/UDP packet. Enter a port name of list
or a number of TCP/UDP port.
Specify TCP/UDP destination port of for filtering TCP/UDP packet. Enter a port name of
list or a number of TCP/UDP port.
Specify tcp flag for TCP packet. If a flag should be set it is prefixed by \"+\".If a flag
should be unset it is prefixed by \"-\". Available options are +urg, +ack, +psh, +rst, +syn,
+fin, -urg, -ack, -psh, -rst, -syn and -fin.To define more than 1 flag - enter additional
flags one after another without a space (example +syn-ack).
(Optional) Shutdown interface while ACE hit
Command Guide of WGSW-28040
58