Enterasys SecureStack C2 Configuration Manual page 602

access-list (extended)
Syntax
To apply ACL restrictions to IP, UDP, ICMP or TCP packets:
access-list access-list-number {deny | permit} protocol source [source-wildcard]
[operator [port]] destination [destination-wildcard]
no access-list access-list-number [entry]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Parameters
access‐list‐number
deny | permit
protocol
source
source‐wildcard
operator port
destination
destination‐
wildcard
insert | replace
entry
18-78 Security Configuration
Specifies an extended access list number. Valid values are from 100 to 199.
Denies or permits access if specified conditions are met.
Specifies an IP protocol for which to deny or permit access. Valid values
and their corresponding protocols are:
• ip ‐ Any Internet protocol
• udp ‐ User Datagram Protocol
• tcp ‐ Transmission Control Protocol
• icmp ‐ Internet Control Message Protocol
Specifies the network or host from which the packet will be sent. Valid
options for expressing source are:
• IP address or range of addresses (A.B.C.D)
• any ‐ Any source host
• host source ‐ IP address of a single source host
(Optional) Specifies the bits to ignore in the source address.
(Optional) Applies access rules to TCP or UDP source or destination port
numbers. Possible operand is:
• eq port ‐ Matches only packets on a given port number.
Specifies the network or host to which the packet will be sent. Valid options
for expressing destination are:
• IP address (A.B.C.D)
• any ‐ Any destination host
• host source ‐ IP address of a single destination host
(Optional) Specifies the bits to ignore in the destination address.
(Optional) Inserts this new entry before a specified entry in an existing
ACL, or replaces a specified entry with this new entry.