Permit, Deny, Redirect-To (Extended Ipv4 Acl) - Supermicro SSE-G2252 User Manual

SSE-G2252/SSE-G2252P Switches User's Manual
Example
This example configures one permit rule for the specific address 10.1.1.21 and another
rule for the address range 168.92.16.x – 168.92.31.x using a bitmask.
SSE-G2252(config-std-acl)#permit host 10.1.1.21
SSE-G2252(config-std-acl)#permit 168.92.16.0 255.255.240.0
SSE-G2252(config-std-acl)#
Related Commands
"access-list ip" on page 26-2
"time-range" on page 21-60

permit, deny, redirect-to (Extended IPv4 ACL)

This command adds a rule to an Extended IPv4 ACL. The rule sets a filter condition for
packets with specific source or destination IP addresses, protocol types, source or
destination protocol ports, or TCP control codes. Use the no form to remove a rule.
Syntax
{permit | deny | redirect-to interface} [protocol-number | udp]
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[time-range time-range-name]
no {permit | deny | redirect-to interface} [protocol-number | udp]
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
{permit | deny | redirect-to interface} tcp
{any | source address-bitmask | host source}
{any | destination address-bitmask | host destination}
[precedence precedence] [tos tos] [dscp dscp]
[source-port sport [bitmask]]
[destination-port dport [port-bitmask]]
[control-flag control-flags flag-bitmask]
[time-range time-range-name]
26-4