Supermicro SSE-G2252 User Manual page 761

Example
This example accepts any incoming packets if the source address is within subnet
10.7.1.x. For example, if the rule is matched; i.e., the rule (10.7.1.0 & 255.255.255.0)
equals the masked address (10.7.1.2 & 255.255.255.0), the packet passes through.
SSE-G2252(config-ext-acl)#permit 10.7.1.1 255.255.255.0 any
SSE-G2252(config-ext-acl)#
This allows TCP packets from class C addresses 192.168.1.0 to any destination
address when set for destination TCP port 80 (i.e., HTTP).
SSE-G2252(config-ext-acl)#permit 192.168.1.0 255.255.255.0 any
destination-port 80
SSE-G2252(config-ext-acl)#
This permits all TCP packets from class C addresses 192.168.1.0 with the TCP control
code set to "SYN."
SSE-G2252(config-ext-acl)#permit tcp 192.168.1.0 255.255.255.0 any
control-flag 2 2
SSE-G2252(config-ext-acl)#
Related Commands
"access-list ip" on page 26-2
"time-range" on page 21-60
Chapter 26: Access Control Lists
26-7