Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 825

IP 4 S A C
V OFTWARE CCESS ONTROL
( - TCP UDP
ACCESS LIST EXTENDED
Mode IPv4 Extended ACL Configuration
Default Any traffic controlled by a software ACL that does not explicitly match a filter is
denied.
Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the
sequence number is omitted, the next available multiple of 10 will be used as the
sequence number for the new filter. A new ACL filter can be inserted into the
middle of an existing list by specifying the appropriate sequence number.
NOTE
(extended numbered)
the required access control list number, or name - but with no further parameters
selected.
Software ACLs will deny access unless explicitly permitted by an ACL action.
To add a new entry to the access-list named my-list that will reject TCP packets
Example 1
from 10.0.0.1on TCP port 10 to 192.168.1.1 on TCP port 20, use the
[creating a list]
commands:
awplus#
awplus(config)#
awplus(config-ip-ext-acl)#
192.168.1.1/32 eq 20
To insert a new entry with sequence number 5 of the access-list named my-list
Example 2
that will accept UDP packets from 10.1.1.0/24 network to 192.168.1.0/24
[adding to a list]
network on UDP port 80, use the commands:
awplus#
awplus(config)#
awplus(config-ip-ext-acl)#
192.168.1.0/24 eq 80
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
)
FILTER
Parameter Description
<destination>
The destination address of the packets. You can specify a single
host, a subnet, or all destinations. The following are the valid
formats for specifying the destination:
<ip-addr>/
<prefix>
any
<destport>
The destination port number, specified as an integer between 0
and 65535.
eq
Matches port numbers equal to the port number specified
immediately after this parameter.
log
Log the results.
: The access control list being configured is selected by running the
command or the
configure terminal
access-list extended my-list
configure terminal
access-list extended my-list
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
An IPv4 address, followed by a
forward slash, then the prefix length.
This matches any destination IP
address within the specified subnet.
Matches any destination IP address.
access-list extended (named)
deny tcp 10.0.0.1/32 eq 10
5 permit udp 10.1.1.0/24
access-list
command, with
825