Cisco catalyst 3750 Command Reference Manual page 449

Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
fragments
log
log-input
timeout value
sequence value
time-range name
icmp-type
icmp-code
icmp-message
ack
established
fin
neq {port | protocol}
psh
range {port | protocol}
rst
syn
urg
OL-8552-07
(Optional) Match noninitial fragmented packets where the fragment
extension header contains a nonzero fragment offset. The fragments
keyword is an option only if the protocol is ipv6 and the operator
[port-number] arguments are not specified.
(Optional) Send an informational logging message to the console about
the packet that matches the entry. (The level of messages logged to the
console is controlled by the logging console command.)
The message includes the access list name and sequence number; whether
the packet was permitted; the protocol, whether it was TCP, UDP, ICMP,
or a number; and, if appropriate, the source and destination addresses and
source and destination port numbers. The message is generated for the
first packet that matches, and then at 5-minute intervals, including the
number of packets permitted in the prior 5-minute interval.
(Optional) Provide the same function as the log keyword, except that the
logging message also includes the receiving interface.
(Optional) Interval of idle time (in seconds) after which a reflexive IPv6
access list times out. The acceptable range is from 1 to 4294967295. The
default is 180 seconds.
(Optional) Specify the sequence number for the access list statement. The
acceptable range is from 1 to 4294967295.
(Optional) Specify the time range that applies to the permit statement. The
name of the time range and its restrictions are specified by the time-range
and absolute or periodic commands, respectively.
(Optional) Specify an ICMP message type for filtering ICMP packets.
ICMP packets can be filtered by the ICMP message type. The type is a
number from 0 to 255.
(Optional) Specify an ICMP message code for filtering ICMP packets.
ICMP packets that are filtered by the ICMP message type can also be
filtered by the ICMP message code. The code is a number from 0 to 255.
(Optional) Specify an ICMP message name for filtering ICMP packets.
ICMP packets can be filtered by an ICMP message name or ICMP
message type and code. The possible names are listed in the "Usage
Guidelines" section.
(Optional) Only for the TCP protocol: acknowledgment (ACK) bit set.
(Optional) Only for the TCP protocol: Means the connection has been
established. A match occurs if the TCP datagram has the ACK or RST bits
set. The nonmatching case is that of the initial TCP datagram to form a
connection.
(Optional) Only for the TCP protocol: Fin bit set; no more data from
sender.
(Optional) Match only packets that are not on a given port number.
(Optional) Only for the TCP protocol: Push function bit set.
(Optional) Match only packets in the range of port numbers.
(Optional) Only for the TCP protocol: Reset bit set.
(Optional) Only for the TCP protocol: Synchronize bit set.
(Optional) Only for the TCP protocol: Urgent pointer bit set.
permit (IPv6 access-list configuration)
Catalyst 3750 Switch Command Reference
2-419