Planet XGS3-42000R User Manual page 454

b. Specify multiple "permit" or "deny" rule entries
Extended name-based MA C-IP access Mode
[no]{deny|permit}
{any-source-mac|{host-source-mac
<host_smac>}|{< sm ac>< sm ac-m ask>}}
{any-de stination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}icmp
{{< source>< source-wildcard>}|any-source|
{host-source< source-host-ip>}}
{{<destination><destination-wildcard>}|any-de stinati
on| {host-de stination <destination-host-ip>}}
[<icmp-type> [<icmp-code>]] [precedence
<precedence>][tos< tos> ][time-range<time-range-na
me>]
[no]{deny|permit}{any-source-mac|{host-source-ma
c <host_smac>}|{< smac>< sm ac-mask>}}
{any-de stination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}igmp
{{< source>< source-wildcard>}|any-source|
{host-source< source-host-ip>}}
{{<destination><destination-wildcard>}|any-de stinati
on| {host-de stination <destination-host-ip>}}
[<igmp-type>] [precedence <precedence>] [tos
<tos>][time-range<time-range-name>]
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{< smac>< smac-ma sk>}}
{any-de stination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}tcp
{{< source>< source-wildcard>}|any-source|
{host-source< source-host-ip>}} [s-port { <port1> |
range <sPortMin> <sPortMax> }]
{{<destination><destination-wildcard>}|any-de stinati
on| {host-de stination <destination-host-ip>}} [d-port
{ <port3> | range <sPortMin> <sPortMax> }]
[ack+fin+psh+rst+urg+ syn]
[precedence<precedence>][tos<tos>][time-range<ti
me-range-name> ]
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{< smac>< smac-mask>}}
{any-de stination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}udp
Command
46-10
Explanation
Creates an extended
name-based MA C-ICMP
access rule; the "no" form
command delet es this
name-based extended
MAC-ICMP access rule.
Creates an extended
name-based MA C-IGMP
access rule; the "no" form
command delet es this
name-based extended
MAC-IGMP access rule.
Creates an extended
name-based MA C-TCP
access rule; the "no" form
command delet es this
name-based extended
MAC-TCP access rule.
Creates an extended
name-based MA C-UDP
access rule; the "no" form
command delet es this