Permit - D-Link DES-7200 Cli Reference Manual

DES-7200 CLI Reference Guide
54.1.8

permit

One or multiple permit conditions are used to determine whether to forward or discard the
packet. In ACL configuration mode, you can modify the existent ACL or configure according
to the protocol details.
Use this command to set the permit rules.
1. Standard IP ACL
[sn] permit {source source-wildcard | host source | any}
2. Extended IP ACL
[sn] permit protocol source source-wildcard destination
destination-wildcard [precedence precedence] [tos tos] [fragments]
[time-range time-range-name]
Extended IP ACLs of some important protocols:

Internet Control Message Protocol (ICMP)
[sn] permit icmp {source source-wildcard | host source | any}
{destination destination-wildcard | host destination | any}
[ icmp-type ] [[icmp-type [icmp-code ]] | [ icmp-message ]] [precedence
precedence] [tos tos] [fragments] [time-range time-range-name]

Transmission Control Protocol (TCP)
[sn] permit tcp {source source-wildcard | host Source | any} [operator
port [port]] {destination destination-wildcard | host destination | any}
[operator port [port]] [precedence precedence] [tos tos] [fragments]
[time-range time-range-name] [match-all tcp-flag]

User Datagram Protocol (UDP)
[sn] permit udp {source source -wildcard|host source |any} [ operator
port [port]] {destination destination-wildcard |host destination | any} [operator port
[port]] [precedence precedence] [tos tos] [fragments] [time-range time-range-name]
3. Extended MAC ACL
[sn] permit {any | host source-mac-address} {any | host
destination-mac-address} [ethernet-type][ cos [out] [inner in]]
4. Extended expert ACL
Chapter 54 ACL Configuration Commands
54-23