Dell Networking N4000 Series Configuration Manual page 614

Command
continued
614
Configuring Access Control Lists
Purpose
– When "eq" is specified, IP ACL rule matches only if
the layer 4 port number is equal to the specified port
number or portkey.
– When "lt" is specified, IP ACL rule matches if the layer
4 destination port number is less than the specified
port number or portkey. It is equivalent to specifying
the range as 0 to <specified port number – 1>.
– When "gt" is specified, IP ACL rule matches if the
layer 4 destination port number is greater than the
specified port number or portkey. It is equivalent to
specifying the range as <specified port number + 1>
to 65535.
– When "neq" is specified, IP ACL rule matches only if
the layer 4 destination port number is not equal to the
specified port number or portkey.
– IPv4 TCP port names: bgp, domain, echo, ftp, ftp-
data, http, smtp, telnet, www, pop2, pop3
– IPv4 UDP port names: domain, echo, ntp, rip, snmp,
tftp, time, who
dstip dstmask
• | any | host
IP address and netmask for match condition of the IP
ACL rule.
– Specifying "any" implies specifying
dstmask
and as "255.255.255.255".
– Specifying "host A.B.C.D" implies
dstmask
and as "0.0.0.0".
precedence
• [precedence
dscp
]—Specifies the TOS for an IP/TCP/UDP ACL rule
depending on a match of precedence or DSCP values
using the parameters dscp, precedence, or tos tosmask.
dstip
—Specifies a destination
dstip
as "0.0.0.0"
dstip
as "A.B.C.D"
tos tosmask
| tos [ ] | dscp