Optical Systems Design OSD2700SFP SERIES Operator's Manual page 183

IP Access List (Extended):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen.
switch_a(config)#
2. Usage:
Use this command to create an Extended IP access list and no with this command to delete an Extended
IP access list.
3. Command Syntax:
(no) ip-access-list ACCESS-LIST NUMBER (deny ｜ p ermit) ip
( ｜ S OURCE_WILDCARD) ( ｜ t cp TCP_SOURCE)
( ｜ D ESTINATION_WILDCARD) ) ( ｜ t cp TCP_ DESTINATION)
ACCESS-LIST NUMBER Range is 100-199 and 2000-2699.
deny Deny certain traffic if conditions matched.
permit Permit certain traffic if conditions matched.
( ｜ h ost) Optional. If this parameter is set, it means this access list has a single source (or destination)
host. This parameter equals to setting SOURCE_WILDCARD to 0.0.0.0.
SOURCE Originating network or host sending packet. The word, any, can be used in place of 0.0.0.0
255.255.255.255.
( ｜ S OURCE WILDCARD) Optional. Wildcard bits in dotted decimal notation to apply to the source.
Ones go in bit positions to ignore. If parameter "host" was set, this parameter can not be set.
( ｜ t cp TCP_SOURCE) Optional. Set L4 port value.
DESTINATION Host receiving packet. The word, any, can be used in place of 0.0.0.0
255.255.255.255.
( ｜ D ESTINATION WILDCARD) Optional. Wildcard bits in dotted decimal notation to apply to the
destination. Ones go in bit positions to ignore. If parameter "host" was set, this parameter can not be
set.
( ｜ t cp TCP_ DESTINATION) Optional. Set L4 port value.
4. Example:
Source Address: any. Destination Address: 192.168.1.20. Destination Wildcard Bits: 0.0.0.255. Then
Destination IP address 192.168.1.0 ~ 192.168.1.255 would be permitted.
switch_a(config)#ip-access-list 100 permit ip any 192.168.1.20 0.0.0.255
switch_a(config)#
MAC Access List:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen.
switch_a(config)#
2. Usage:
Use mac-access-list command to create a MAC access list and no mac-access-list command to delete
a MAC access list.
3. Command Syntax:
PAGE 183
OSD2700SFP OPERATOR MANUAL
OPTICAL SYSTEMS DESIGN
( ｜ h ost) SOURCE
( ｜ h ost) DESTINATION
DOC ID: 10112704