Filter
Top Products
241
3. Bind access list to a specific direction of the specified port.
1. Configuring access list
(1) Configuring a numbered standard IP access list
Command Explanation
Global Mode
access list <num> {deny | permit}
{{<sIpAddr> <sMask>} | any-source |
{host-source <sIpAddr>}}
no access list <num>
Create a numbered standard IP access list, if
the access list already exists, then a rule will
add to the current access list; the “no
access list <num>” command deletes a
numbered standard IP access list.
(2) Configuring a numbered extensive IP access list
Command Explanation
Global Mode
access list <num> {deny | permit} icmp
{{<sIpAddr> <sMask>} | any-source | {host-source
<sIpAddr>}} {{<dIpAddr> <dMask>} |
any-destination | {host-destination <dIpAddr>}}
[<icmp-type> [<icmp-code>]] [precedence <prec>]
[tos <tos>]
Create a numbered ICMP
extended IP access rule; if the
numbered extended access list
of specified number does not
exist, then an access list will be
created using this number.
access list <num> {deny | permit} igmp
{{<sIpAddr> <sMask>} | any-source | {host-source
<sIpAddr>}} {{<dIpAddr> <dMask>} |
any-destination | {host-destination <dIpAddr>}}
[<igmp-type>] [precedence <prec>] [tos <tos>]
Create a numbered IGMP
extended IP access rule; if the
numbered extended access list
of specified number does not
exist, then an access list will be
created using this number.
access list <num> {deny | permit} tcp {{<sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
[s-port <sPort>] {{<dIpAddr> <dMask>} |
any-destination | {host-destination <dIpAddr>}}
[d-port <dPort>] [ack | fin | psh | rst | syn | urg]
[precedence <prec>] [tos <tos>]
Create a numbered TCP
extended IP access rule; if the
numbered extended access list
of specified number does not
exist, then an access list will be
created using this number.
access list <num> {deny | permit} udp {{<sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}}
[s-port <sPort>] {{<dIpAddr> <dMask>} |
any-destination | {host-destination <dIpAddr>}}
[d-port <dPort>] [precedence <prec>] [tos <tos>]
Create a numbered UDP
extended IP access rule; if the
numbered extended access list
of specified number does not
exist, then an access list will be
created using this number.