Configuring Extended Numbered Acls; Extended Numbered Acl Syntax - Dell PowerConnect B-FCXs Configuration Manual

16

Configuring extended numbered ACLs

The commands in this example configure a standard ACL named "Net1". The entries in this ACL
deny packets from three source IP addresses from being forwarded on port 1. Since the implicit
action for an ACL is "deny", the last ACL entry in this ACL permits all packets that are not explicitly
denied by the first three ACL entries. For an example of how to configure the same entries in a
numbered ACL, refer to
Notice that the command prompt changes after you enter the ACL type and name. The "std" in the
command prompt indicates that you are configuring entries for a standard ACL. For an extended
ACL, this part of the command prompt is "ext". The "nACL" indicates that you are configuring a
named ACL.
Configuring extended numbered ACLs
This section describes how to configure extended numbered ACLs.
Extended ACLs let you permit or deny packets based on the following information:
•
•
•
•
•
The IP protocol can be one of the following well-known names or any IP protocol number from 0 –
255:
•
•
•
•
•
•
•
For TCP and UDP, you also can specify a comparison operator and port name or number. For
example, you can configure a policy to block web access to a specific website by denying all TCP
port 80 (HTTP) packets from a specified source IP address to the website IP address.

Extended numbered ACL syntax

Syntax: [no] access-list <ACL-num> deny | permit <ip-protocol> <source-ip> | <hostname>
Syntax: [no] access-list <ACL-num> deny | permit host <ip-protocol> any any
Syntax: [no] ip access-group <ACL-num> in
556
"Configuring standard numbered ACLs"
IP protocol
Source IP address or host name
Destination IP address or host name
Source TCP or UDP port (if the IP protocol is TCP or UDP)
Destination TCP or UDP port (if the IP protocol is TCP or UDP)
Internet Control Message Protocol (ICMP)
Internet Group Management Protocol (IGMP)
Internet Gateway Routing Protocol (IGRP)
Internet Protocol (IP)
Open Shortest Path First (OSPF)
Transmission Control Protocol (TCP)
User Datagram Protocol (UDP)
<wildcard> [<operator> <source-tcp/udp-port>] <destination-ip> | <hostname>
[<icmp-num> | <icmp-type>] <wildcard> [<tcp/udp comparison operator>
<destination-tcp/udp-port>] [802.1p-priority-matching <0 –7>] [dscp-cos-mapping ]
[dscp-marking <0-63> [802.1p-priority-marking <0 –7>... | dscp-cos-mapping]]
[dscp-matching <0-63>] [log] [precedence <name> | <0 – 7>] [tos <0 – 63> | <name>]
[traffic policy <name>]
on page 551.
PowerConnect B-Series FCX Configuration Guide
53-1002266-01