7000 Series L3 Managed Switch Reference Manual for Software v2.0
10-6 ACL Commands
config acl rule match protocol keyword
This command specifies the IP protocol of a packet as a match condition for an ACL rule
referenced by the
<aclid> and <rulenum>. The <protocolkey> parameter identifies the
protocol using a single keyword notation and has the possible values of
icmp, igmp, ip, tcp,
and
udp. A protocol keyword of ip is interpreted to match all protocol number values.
Either this command or
config acl match protocol number commands can be used to specify
an IP protocol value as a match criterion.
Format config acl rule match protocol keyword <aclid> <rulenum> <proto-
colkey>
config acl rule match protocol number
This command specifies the protocol to filter for an ACL rule referenced by the <aclid> and
<rulenum>.
The <protocolnum> parameter identifies the protocol by number. The protocol
number is a standard value assigned by IANA and is interpreted as an integer from 0 to 255.
Either this command or
config acl match protocol keyword commands can be used to specify
an IP protocol value as a match criterion.
Format config acl rule match protocol number <aclid> <rulenum> <protocol-
num>
config acl rule match srcip
This command specifies a packet’s source IP Address and Mask as a match condition for an ACL
rule referenced by the
<aclid> and <rulenum>. The <ipaddr> and <ipmask> parameters are 4-
digit dotted-decimal numbers which represent the source IP Address and IP Mask, respectively.
Format config acl rule match srcip <aclid> <rulenum> <ipaddr> <ipmask>