Table of Contents
Advertisement
permit (ip access-list extended)
Sets the conditions for permitting access in IPv4 packet filtering.
Input format
To set or change information:
To delete information:
no
Input mode
(config-ext-nacl)
Parameters
<Seq>
Sets the sequence in which filter conditions are applied.
1.
2.
{ip |
<Protocol>
Sets the upper-layer protocol condition of IPv4 packets.
Note that if all protocols are applicable,
1.
When upper-layer protocols are other than TCP and UDP
[
<Seq>
] permit {ip |
wildcard>
| host
<Src IPv4>
<Dst IPv4>
| any} [{[tos
<DSCP>
}] [vlan
When an upper-layer protocol is TCP
[
<Seq>
] permit tcp {
| any}[eq
<Src port>
| any} [eq
<Dst port>
<TOS>
] [precedence
ID>
] [user-priority
When an upper-layer protocol is UDP
[
<Seq>
] permit udp {
<Src port>
| any}[eq
<Dst port>
| any} [eq
dscp
<DSCP>
}] [vlan
<Seq>
Default value when this parameter is omitted:
10 is set as the initial value if there are no conditions in the access list.
If conditions have been set, the initial value is the maximum value for the
application sequence that has been set plus 10.
Note, however, that if the maximum value for the application sequence is
greater than 4294967285, the value cannot be omitted.
Range of values:
Set 1 to 4294967295 (in decimal).
| icmp | igmp | tcp | udp}
Default value when this parameter is omitted:
This parameter cannot be omitted.
<Protocol>
| icmp | igmp } {
| any} {
<Dst IPv4> <Dst IPv4 wildcard>
<TOS>
] [precedence
<VLAN ID>
] [user-priority
<Src IPv4> <Src IPv4 wildcard>
] {
<Dst IPv4> <Dst IPv4 wildcard>
] [ack] [fin] [psh] [rst] [syn] [urg] [{[tos
<Precedence>
] | dscp
<Priority>
]
<Src IPv4> <Src IPv4 wildcard>
<Dst IPv4> <Dst IPv4 wildcard>
] {
<TOS>
] [{[tos
] [precedence
<VLAN ID>
] [user-priority
is set.
ip
permit (ip access-list extended)
<Src IPv4> <Src IPv4
| host
<Precedence>
] | dscp
<Priority>
]
| host
<Src IPv4>
| host
<Dst IPv4>
<DSCP>
<VLAN
}] [vlan
| host
<Src IPv4>
<Dst IPv4>
| host
<Precedence>
<Priority>
]
] |
305
Advertisement
Table of Contents
