Advertisement
operator
port port
destination
mask
count
byte
log
order
monitor
fragments
Defaults
Not configured.
Command Modes
CONFIGURATION-EXTENDED-ACCESS-LIST
Command
Version 8.3.1.0
History
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
(OPTIONAL) Enter one of the following logical operand:
eq
•
= equal to
neq
•
= not equal to
gt
•
= greater than
lt
•
= less than
range
•
= inclusive range of ports (you must specify two port for the
parameter.)
Enter the application layer port number. Enter two port numbers if using the range
logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP
25 = SMTP
169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword
(OPTIONAL) Enter the keyword
(OPTIONAL, E-Series only) Enter the keyword
(OPTIONAL) Enter the keyword
entry.
Range:
0-254 (where 0 is the highest priority and 254 is the lowest; lower order
numbers have a higher priority)
Default:
If the order keyword is not used, the ACLs have the lowest order by
default (255).
(OPTIONAL) Enter the keyword
that you want to monitor and the ACL in which you are creating the rule will be
applied to the monitored interface. For details, see the section "Flow-based
Monitoring" in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments
Enter the keyword
dscp
Added
keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the
established
keyword.
Expanded to include the optional QoS
count
to count packets processed by the filter.
byte
to count bytes processed by the filter.
log
to enter ACL matches in the log.
order
to specify the QoS priority for the ACL
monitor
when the rule is describing the traffic
to use ACLs to control packet fragments.
monitor
order
priority for the ACL entry.
Access Control Lists (ACL) | 239
port
option. Deprecated
Advertisement
