Accton Technology ES4626 Management Manual page 243

[no] {deny |
<sMask>} | any-source
<sIpAddr>}} {{<dIpAddr>
any-destination
<dIpAddr>}} [<icmp-type>
[precedence <prec>] [tos <tos>]
[no] {deny |
<sMask>} | any-source
<sIpAddr>}} {{<dIpAddr>
any-destination
<dIpAddr>}} [<igmp-type>]
<prec>] [tos <tos>]
[no] {deny | permit} tcp {{<sIpAddr> <sMask>}
| any-source |
[s-port <sPort>] {{<dIpAddr> <dMask>} |
any-destination
<dIpAddr>}} [d-port <dPort>] [ack | fin | psh |
rst | syn | urg] [precedence <prec>] [tos <tos>]
[no] {deny | permit} udp {{<sIpAddr> <sMask>}
| any-source |
[s-port <sPort>] {{<dIpAddr> <dMask>} |
any-destination
<dIpAddr>}} [d-port <dPort>] [precedence
<prec>] [tos <tos>]
[no] {deny | permit} {eigrp | gre | igrp | ipinip |
ip | <int>} {{<sIpAddr> <sMask>} | any-source |
{host-source
<dMask>} | any-destination | {host-destination
<dIpAddr>}} [precedence <prec>] [tos <tos>]
c. Exit extended IP ACL configuration mode
Command
Extended IP ACL Mode
Exit
2. Configuring packet filtering function
(1) Enable global packet filtering function
Command
Global Mode
firewall enable
permit} icmp {{<sIpAddr>
| {host-source
<dMask>}
| {host-destination
[<icmp-code>]]
permit} igmp {{<sIpAddr>
| {host-source
<dMask>}
| {host-destination
[precedence
{host-source <sIpAddr>}}
| {host-destination
{host-source <sIpAddr>}}
| {host-destination
<sIpAddr>}} {{<dIpAddr>
Explanation
Exit
configuration mode
Explanation
Enable global packet filtering function
243
Create an
name-based ICMP IP access
|
rule; the "no" form command
deletes this
extended IP access rule
Create an
name-based IGMP IP access
|
rule; the "no" form command
deletes this
extended IP access rule
Create an
name-based TCP IP access
rule; the "no" form command
deletes this
extended IP access rule
Create an
name-based UDP IP access
rule; the "no" form command
deletes this
extended IP access rule
Create an
name-based IP access rule for
other IP protocols; the "no" form
command
name-based
access rule
extended name-based
extended
name-based
extended
name-based
extended
name-based
extended
name-based
extended
deletes this
extended IP
IP ACL