Permit - Dell C9000 Series Reference Manual

permit

Configure a permit rule. A permit rule excludes the matching packets from PBR classification and routes them
using conventional routing.
C9000 Series
Syntax
permit {ip-protocol-number | protocol-type} {source mask | any |
host ip-address} {destination mask | any | host ip-address} [bit]
[operators]
To remove the rule, use one of the following:
Parameters
ip-protocol-
number
protocol-type
source
mask
any
host ip-address
destination
bit
• If you know the filter sequence number, use the no seq sequence-number
syntax command.
• You can also use the no permit {ip-protocol-number | protocol-type}
{source mask | any | host ip-address} {destination mask | any
| host ip-address} [bit] [operators] command.
Enter a number from 0 to 255 for the protocol identified in the
IP protocol header.
Enter one of the following keywords as the protocol type:
•
•
•
•
Enter the IP address of the network or host from which the
packets were sent.
Enter a network mask in /prefix format (/x).
Enter the keyword any to specify that all traffic is subject to the
filter.
Enter the keyword host then he IP address to specify a host IP
address.
Enter the IP address of the network or host to which the packets
are sent.
(OPTIONAL) For the TCP protocol type only, enter one or a
combination of the following TCP flags:
•
icmp for internet control message protocol
ip for any internet protocol
tcp for transmission control protocol
udp for user datagram protocol
ack = acknowledgement
Policy-based Routing (PBR) 1703