Cisco Nexus 5500 Series Command Reference Manual page 188

permit tcp (IPv4)
Source and Destination
You can specify the source and destination arguments in one of several ways. In each rule, the method
that you use to specify one of these arguments does not affect how you specify the other argument. When
you configure a rule, use the following methods to specify the source and destination arguments:
Address and network wildcard—You can use an IPv4 address followed by a network wildcard to
•
specify a host or a network as a source or destination. The syntax is as follows:
IPv4-address network-wildcard
This example shows how to specify the source argument with the IPv4 address and network wildcard
for the 192.168.67.0 subnet:
switch(config-acl)# permit tcp 192.168.67.0 0.0.0.255 any
Address and variable-length subnet mask—You can use an IPv4 address followed by a
•
variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The
syntax is as follows:
IPv4-address/prefix-len
This example shows how to specify the source argument with the IPv4 address and VLSM for the
192.168.67.0 subnet:
switch(config-acl)# permit tcp 192.168.67.0/24 any
Host address—You can use the host keyword and an IPv4 address to specify a host as a source or
•
destination. The syntax is as follows:
host IPv4-address
This syntax is equivalent to IPv4-address/32 and IPv4-address 0.0.0.0.
This example shows how to specify the source argument with the host keyword and the
192.168.67.132 IPv4 address:
switch(config-acl)# permit tcp host 192.168.67.132 any
Any address—You can use the any keyword to specify that a source or destination is any IPv4
•
address. For examples of the use of the any keyword, see the examples in this section. Each example
shows how to specify a source or destination by using the any keyword.
TCP Port Names
When you specify the protocol argument as tcp, the port argument can be a TCP port number, which is
an integer from 0 to 65535. It can also be one of the following keywords:
• bgp—Border Gateway Protocol (179)
• chargen—Character generator (19)
cmd—Remote commands (rcmd, 514)
•
daytime—Daytime (13)
•
discard—Discard (9)
•
domain—Domain Name Service (53)
•
drip—Dynamic Routing Information Protocol (3949)
•
echo—Echo (7)
•
exec—EXEC (rsh, 512)
•
finger—Finger (79)
•
Cisco Nexus 5500 Series NX-OS Security Command Reference
174
Chapter P Commands
OL-27883-02