NETGEAR ProSAFE M7100-24X Reference Manual page 260

ProSAFE M7100 Managed Switches
Format
{deny | permit} {every | {{<protolkey> | <0-255>} {<srcip> <srcmask>
| any | host <srcip>} [{range {<portkey> | <startport>} {<portkey> |
<endport>}} | {eq | neq | lt | gt} {<portkey> | <0-65535>}] {<dstip>
<dstmask> | any | host <dstip>} [{range {<portkey> | <startport>}
{<portkey> | <endport>}} | {eq | neq | lt | gt} {<portkey> |
<0-65535>}] [flag [+fin | -fin] [+syn | -syn] [+rst | -rst] [+psh |
-psh] [+ack | -ack] [+urg | -urg] [established]] [icmp-type
<icmp-type> [icmp-code <icmp-code>] | icmp-message <icmp-message>]
[fragments] [precedence <precedence> | tos <tos> [<tosmask>] | dscp
<dscp>]}} [time-range <time-range-name>] [log] [assign-queue
<queue-id>] [{mirror | redirect} <unit/slot/port>] [rate-limit <rate>
<burst-size>]
Mode Ipv4-Access-List Config
Parameter
deny or permit
every
protocolkey or number
srcip srcmask, any, or host srcip
Description
Specifies the action of the IP ACL rule:
• deny. The IP ACL rule denies the action.
• permit. The IP ACL rule permits the action.
The IP ACL matches every packet
Specifies either the supported protocol key or the protocol number of
the protocol to filter for an extended IP ACL rule:
• protocolkey. The supported protocol key that you can enter is eigrp,
gre, icmp, igmp, ip, ipinip, ospf, pim, tcp, or udp.
• number. Enter a number from 0 to 255.
Specifies a source IP address and source netmask for the match
condition of the IP ACL rule.
• srcip and srcmask. Enter the source IP address (scrip) and source
netmask (srcmask).
• any. The source IP address is 0.0.0.0 and the source network mask
is 255.255.255.255.
• host and srcip. Specify that you use a hostname (host) and enter the
name (scrip). The source network mask is 0.0.0.0.
Quality of Service (QoS) Commands
260