Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 822

IP 4 S A C
V OFTWARE CCESS ONTROL
( - IP
ACCESS LIST EXTENDED PROTOCOL FILTER
Table 25-6: IP protocol number and description (cont.)
Mode IPv4 Extended ACL Configuration
Default Any traffic controlled by a software ACL that does not explicitly match a filter is
denied.
Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the
sequence number is omitted, the next available multiple of 10 will be used as the
sequence number for the new filter. A new ACL filter can be inserted into the
middle of an existing list by specifying the appropriate sequence number.
NOTE
(extended numbered)
the required access control list number, or name - but with no further parameters
selected.
Software ACLs will deny access unless explicitly permitted by an ACL action.
Example 1 Use the following commands to add a new access-list filter entry to the access-list
named my-list that will reject IP packets from source address 10.10.1.1/32
[creating a list]
to destination address 192.68.1.1/32:
awplus#
awplus(config)#
awplus(config-ip-ext-acl)#
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
)
Protocol Number
60
88
89
97
98
108
112
134
135
136
137
138
139-252
253
254
255
: The access control list being configured is selected by running the
command or the
configure terminal
access-list extended my-list
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
Protocol Description [RFC]
Destination Options for IPv6 [RFC1883]
EIGRP (Enhanced Interior Gateway Routing Protocol)
OSPFIGP [RFC1583]
Ethernet-within-IP Encapsulation / RFC3378
Encapsulation Header / RFC1241
IP Payload Compression Protocol / RFC2393
Virtual Router Redundancy Protocol / RFC3768
RSVP-E2E-IGNORE / RFC3175
Mobility Header / RFC3775
UDPLite / RFC3828
MPLS-in-IP / RFC4023
MANET Protocols / RFC-ietf-manet-iana-07.txt
Unassigned / IANA
Use for experimentation and testing / RFC3692
Use for experimentation and testing / RFC3692
Reserved / IANA
access-list extended (named)
deny ip 10.10.1.1/32 192.168.1.1/32
access-list
command, with
822