(Access-List Extended Ip Protocol Filter) - Allied Telesis CentreCOM FS980M/9 Command Reference Manual

IP 4 S A C
V OFTWARE CCESS ONTROL
( - IP
ACCESS LIST EXTENDED PROTOCOL FILTER

(access-list extended IP protocol filter)

Overview Use this ACL filter to add a new IP protocol type filter entry to the current extended
access-list. If the sequence number is specified, the new filter is inserted at the
specified location. Otherwise, the new filter is added at the end of the access-list.
The no variant of this command removes an IP protocol filter entry from the
current extended access-list. You can specify the IP filter entry for removal by
entering either its sequence number (e.g. no 10), or by entering its IP filter profile
without specifying its sequence number.
Note that the sequence number can be found by running the
Software ACLs)
[<sequence-number>] {deny|permit} proto <ip-protocol> <source>
Syntax [proto]
<destination> [log]
no {deny|permit} proto <ip-protocol> <source> <destination>
[log]
no <sequence-number>
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
)
command.
Parameter Description
<sequence-
<1-65535>
number>
The sequence number for the filter entry of the selected access
control list.
deny
Access-list rejects packets that match the source and destination
filtering specified with this command.
permit
Access-list permits packets that match the source and destination
filtering specified with this command.
proto
<1-255>
<ip-protocol>
Specify IP protocol number, as defined by IANA (Internet Assigned
Numbers Authority
www.iana.org/assignments/protocol-numbers)
See below for a list of IP protocol numbers and their descriptions.
<source>
The source address of the packets. You can specify a single host, a
subnet, or all sources. The following are the valid formats for
specifying the source:
<ip-addr>/
<prefix>
any
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
show access-list (IPv4
An IPv4 address, followed by a forward
slash, then the prefix length. This matches
any source IP address within the specified
subnet.
Matches any source IP address.
820