Planet XGS3-42000R User Manual page 447

5. Clear the filtering information of the specified port
1. Configuring acce ss-li st
(1) Configuring a numbered standard IP access-li st
Global Mode
access-li st <num> {deny | permit} {{< sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
no access-li st <num>
(2) Configuring a numbered extensive IP access-li st
Global Mode
access-li st <num> {deny | permit} icmp {{< sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
{{<dIpAddr> <dMask>} | any-de stination |
{host-de stination <dIpAddr>}} [<icmp-type>
[<icmp-code>]] [precedence <prec>] [tos
<tos>][time-range<time-range-name>]
access-li st <num> {deny | permit} igmp {{< sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
{{<dIpAddr> <dMask>} | any-de stination |
{host-de stination <dIpAddr>}} [<igmp-type> ]
[precedence <prec>] [tos
<tos>][time-range<time-range-name>]
access-li st <num> {deny | permit} tcp {{< sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
[s-port { < sPort> | range <sPortMin> <sPortMax> }]
{{<dIpAddr> <dMask>} | any-de stination |
{host-de stination <dIpAddr>}} [d-port { <dPort> |
range <dPortMin> <dPortMax> }]
[ack+fin+psh+rst+urg+ syn] [precedence <prec>] [tos
<tos>][time-range<time-range-name>]
access-li st <num> {deny | permit} udp {{< sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
[s-port { < sPort> | range <sPortMin> <sPortMax> }]
{{<dIpAddr> <dMask>} | any-de stination |
{host-de stination <dIpAddr>}} [d-port { <dPort> |
Command
Command
Creates a numbered standard IP
access-list, if the
already exists, then a rule will
add to the current access-list;
the
<num>" command deletes a
numbered
access-list.
Creates
extended IP access rule; if t he
numbered extended access-list of
specified number does not exist,
then an access-list will be c reat ed
using this number.
Creates
extended IP access rule; if t he
numbered extended access-list of
specified number does not exist,
then an access-list will be c reat ed
using this number.
Creates
extended IP access rule; if t he
numbered extended access-list of
specified number does not exist,
then an access-list will be c reat ed
using this number.
Creates
extended IP access rule; if t he
numbered extended access-list of
specified number does not exist,
then an access-list will be c reat ed
46-3
Explanation
access-list
"no acce ss-li st
standard IP
Explanation
a numbered ICMP
a numbered IGMP
a numbered TCP
a numbered UDP