Ip Access-List - Cisco MDS 9000 series Command Reference Manual

ip access-list

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
ip access-list
To configure IP access control lists (ACLs), use the ip access-list command in configuration mode. To
negate a previously issued command or revert to factory defaults, use the no form of the command.
Syntax Description
list-name
deny
permit
ip-protocol
src-addr
src-wildcard
dest-addr
dest-wildcard
Cisco MDS 9000 Family Command Reference
11-40
ip access-list list-name {deny | permit} ip-protocol
{src-addr src-wildcard}
{dest-addr dest-wildcard | operator port-value}
[operator port port-value]
[established | icmp-type icmp-value]
[tos tos-value]
[log-deny]
Configures an access list with this name.The maximum length is 64
characters.
Denies access if the conditions match.
Allows access if the conditions match.
Specifies the name or number (integer range from 0 to 255) of an IP protocol.
The IP protocol name can be icmp, ip, tcp, or udp.
Specifies the network from which the packet is sent. There are two ways to
specify the source:
•
•
Applies the wildcard bits to the source.
Each wildcard bit set to zero indicates that the corresponding bit position in
the packet's IP address must exactly match the bit value in the corresponding
position of the packet's ip address or it will not be considered a match to this
access list. There are two ways to specify the destination wildcard:
•
•
Specifies the network from which the packet is sent. There are two ways to
specify the destination:
•
•
Applies the wildcard bits to the destination. There are two ways to specify
the destination wildcard:
•
•
A 32-bit quantity in four-part, dotted-decimal format
A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
A 32-bit quantity in four-part, dotted-decimal format
A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
A 32-bit quantity in four-part, dotted-decimal format
A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
A 32-bit quantity in four-part, dotted-decimal format
A keyword any as an abbreviation for a destination and a
destination-wildcard of 0.0.0.0 255.255.255.255
Chapter 11 I Commands
OL-8413-07, Cisco MDS SAN-OS Release 3.x