Edge-Core ES4626 User Manual page 795

(1) Create the name of the time range
(2) Configure periodic time range
(3) Configure absolute time range
4. Bind access-list to a specific direction of the specified port.
5. Clear the filter information of the specified port
1. Configuring access-list
(1) Configuring a numbered standard IP access-list
Command
Global Mode
access-list <num> {deny | permit} {{<sIpAddr>
<sMask>} | any | {host <sIpAddr>}}
no access-list <num>
(2) Configuring a numbered extensive IP access-list
Command
Global Mode
access-list <num>
{{<sIpAddr> <sMask>} | any | {host <sIpAddr>}}
{{<dIpAddr> <dMask>}
{host-destination
[<icmp-code>]] [precedence <prec>] [tos <tos>]
access-list <num>
{{<sIpAddr> <sMask>} | any | {host <sIpAddr>}}
{{<dIpAddr> <dMask>}
{host-destination
[precedence <prec>] [tos <tos>]
{deny | permit}
| any-destination
<dIpAddr>}} [<icmp-type>
{deny | permit}
| any-destination
<dIpAddr>}} [<igmp-type>]
795
Explanation
Creates a numbered standard
IP access-list, if the access-list
already exists, then a rule will
add to the current access-list;
the "no
<num>" command deletes a
numbered
access-list.
Explanation
Creates a numbered ICMP
extended IP access rule; if the
icmp
numbered
access-list of specified number
|
does not
access-list
using this number.
Creates a numbered IGMP
extended IP access rule; if the
igmp
numbered
access-list of specified number
|
does not
access-list
using this number.
access-list
standard IP
extended
exist, then an
will be created
extended
exist, then an
will be created