Create Access-Mask - Extreme Networks ExtremeWare Command Reference Manual

Security Commands

create access-mask

create access-mask <access-mask name> {code-point} {ip-protocol}
{icmp-code} {icmp-type} {igmp-type} {ipmc-group/<mask length>}
{dest-ip/<mask length>} {dest-L4port} {dest-mac} {egressport} {ethertype}
{permit-established} {ports} {precedence <number>} {source-ip/<mask
length>} {source-L4port} {source-mac} {tos} {vlan} {vlan-pri}
{vlan-pri-2bits}
Description
Creates an access mask.
NOTE
This command is available only on the "e" series switches.
Syntax Description
access mask name Specifies the name of the access-mask.
code-point Specifies that the DiffServ code point should be specified when you create an access
list using this access mask.
ipprotocol Specifies that the IP protocol should be specified when you create an access list using
this access mask.
icmp-code Specifies that the ICMP code should be specified when you create an access list using
this access mask.
icmp-type Specifies that the ICMP type should be specified when you create an access list using
this access mask.
igmp-type Specifies that the IGMP type should be specified when you create an access list using
this access mask.
ipmc-group/mask length Specifies that the IP multicast group and mask length should be specified when you
create an access list using this access mask.
dest-ip/mask length Specifies that the destination IP address and mask length should be specified when
you create an access list using this access mask.
dest-L4port Specifies that the destination TCP/UDP port should be specified when you create an
access list using this access mask.
dest-mac Specifies that the destination MAC address should be specified when you create an
access list using this access mask.
egressport Specifies that the egress port should be specified when you create an access list using
this access mask.
ethertype Specifies that the Ethernet type field should be specified when you create an access
list using this access mask.
permit-established Specifies that the TCP SYN and ACK bits should be specified when you create an
access list using this access mask.
ports Specifies that one or more ingress ports should be specified when you create an
access list using this access mask.
precedence Specifies that the access-mask precedence, should be specified when you create an
access list using this access mask.
source-ip/mask length Specifies that the source IP address and mask length should be specified when you
create an access list using this access mask.
970 ExtremeWare 7.7 Command Reference Guide