ADC CUDA 3 Administration Manual page 336

334 C 15: IP P
HAPTER ACKET
F
ILTERING
The following table provides a quick reference to access list command
arguments. For more information, see the Cuda 12000 IP Access Switch CLI
Reference Guide.
Table 15-1 Access List Command Arguments
Argument
list number
rule number
source ip address
source ip mask
destination ip
address
destination ip mask
host
operator
port
established
tos
tos-mask
Description
Index number that identifies this list. Valid range:
1–65535.
Number identifying the precedence of this access list.
Smaller rule numbers result in greater precedence. This
means that an access list with a lesser rule number is
applied against the interface first.
IP address seen in the source IP address field of the
protocol header. A value of any acts as a wildcard.
Source IP address network mask, if you specified a
specified address.
IP address seen in the destination IP address field of the
protocol header. A value of any acts as a wildcard.
Destination IP address network mask, if you specified a
specific address.
Host address if filtering on a specific IP host.
Operand used to compare source and destination ports.
You can use the following operands:
lt (less than)
gt (greater than)
eq (equal)
range (inclusive range)
TCP or UDP port number. Valid range: 0–65535.
For TCP protocol only. Indicates an established TCP
connection. Match occurs when the ACK or RST bits of
a TCP datagram are set.
Type of Service level identified in the IP packet header.
Valid Range 0 – 15.
Type of Service mask.
ADC Telecommunications, Inc.