Alcatel OmniStack LS 6248 User Manual page 327

timestamp-reply
information-reply
datagram-conversion-error, mobile-host-redirect,
mobile-registration-request
domain-name-request
(Range: 0-255)
• icmp-code — Specifies an ICMP message code for filtering ICMP packets.
ICMP packets that are filtered by ICMP message type can also be filtered
by the ICMP message code. (Range: 0-255)
• igmp-type — IGMP packets can be filtered by IGMP message type. Enter a
number or one of the following values:
or , host-report-v2, host-leave-v2, host-report-v3 (Range: 0-255)
trace
• destination-port — Specifies the UDP/TCP destination port.
(Range: 0-65535)
• source-port — Specifies the UDP/TCP source port. (Range: 0-65535)
• list-of-flags — Specifies a list of TCP flags that can be triggered. If a flag is
set, it is prefixed by "+". If a flag is not set, it is prefixed by "-". Possible
values:
+urg
. The flags are concatenated into one string. For example:
-fin
Default Setting
No IPv4 ACL is defined.
Command Mode
IP-Access List Configuration mode
Command Usage
Use the
ip-access-list
IP-Access List Configuration mode.
Before an Access Control Element (ACE) is added to an ACL, all packets are
permitted. After an ACE is added, an implied
the end of the list and those packets that do not match the conditions defined
in the permit statement are denied.
Examples
The following example shows how to define a permit statement for an IP ACL.
Console(config)#
Console(config-ip-al)#
Related Commands
ip-access-list
permit (ip)
show access-lists
,
information-request
,
address-mask-request
,
mobile-registration-reply
,
domain-name-reply
, , ,
+ack +psh +rst
Global Configuration mode command to enable the
ip-access-list
permit
rsvp 192.1.1.1 0.0.0.0
,
,
address-mask-reply, traceroute,
,
skip
,
dvmrp host-query
, , , ,
+syn +fin -urg -ack
deny-any-any
ip-acl1
ACL Commands
,
and .
photuris
,
host-report
, , ,
-psh -rst -syn
+fin-ack
condition exists at
any dscp
56
4
,
pim
and
.
303