Allied Telesis AT-8100L/8 User Manual page 1522

Chapter 98: Advanced Access Control Lists (ACLs)
Table 159. ACCESS-LIST Commands for Creating Numbered IPv4 ACLs (Continued)
To Do This Task
Create Numbered IPv4 ACLs that filter
ingress packets based on UDP port
numbers.
1522
ACCESS-LIST
src_ipaddress
src_udp_port dst_ipaddress
EQ|LT|GT|NE|RANGE
Numbered IPv4 ACL with IP Packets Examples
This is the command format for creating ACLs that filter IP packets based
on source and destination IPv4 addresses:
id_number action
access-list
dst_ipaddress
[vlan
The ID_NUMBER parameter assigns the ACL a unique ID number in the
range of 3000 to 3699. Within this range, you can number ACLs in any
order.
The ACTION parameter specifies the action that the port performs on
packets matching the filtering criteria of the ACL. Here are the possible
actions:

permit— Forwards all ingress packets that match the ACL. Ports,
by default, accept all ingress packets. Consequently, a permit ACL
is only necessary when you want a port to forward a subset of
packets that are otherwise discarded.
 deny— Discards all ingress packets that match the ACL.
 copy-to-mirror— Copies all ingress packets that match the ACL to
the destination port of the mirror port. This action must be used
together with the port mirror feature, explained in Chapter 27, "Port
Mirror" on page 459.
The SRC_IPADDRESS and DST_IPADDRESS parameters specify the
source and destination IPv4 addresses. Choose from the following
options:
 any— Matches any IP address.
 ipaddress/mask— Matches packets that have an IP address of a
subnet or an end node. The mask is a decimal number that
represents the number of bits in the address, from left to right, that
constitute the network portion of the address. For example, the
subnet address 149.11.11.0/24 has a mask of "24" for the first
twenty-four bits of the network portion of the address. The IP
address and the mask are separated by a slash (/); for example,
"149.11.11.0/24."
Use This Command
id_number action
EQ|LT|GT|NE|RANGE
dst_udp_port
src_ipaddress
ip
vid
]
UDP
vid
[VLAN ]