Ip Access-List Extended Name - Hirschmann Msp40 Referenzhandbuch

Access Control List (ACL)
3.3 ip
3.3 ip
Set IP parameters.
3.3.1

ip access-list extended name

Create an IP access-list.

Mode: Global Config Mode

Privilege Level: Operator

Format: ip access-list extended name <P-1> deny src <P-2> [<P-3> <P-4>] dst
<P-5> [<P-6> <P-7>] proto <P-8> [flag [<P-9>] [<P-10>] [<P-11>] [<P-12>]
[<P-13>] [<P-14>] [<P-15>]] [icmp-type <P-16>] [icmp-code <P-17>] [igmp-
type <P-18>] [fragments] [precedence <P-19>] [log] [time-range <P-20>]
[assign-queue <P-21>] [tos <P-22> <P-23>] [log] [time-range <P-24>]
[assign-queue <P-25>] [dscp <P-26>] [log] [time-range <P-27>] [assign-
queue <P-28>] every [log] [time-range <P-29>] [assign-queue <P-30>] permit
src <P-31> [<P-32> <P-33>] dst <P-34> [<P-35> <P-36>] proto <P-37> [flag
[<P-38>] [<P-39>] [<P-40>] [<P-41>] [<P-42>] [<P-43>] [<P-44>]] [icmp-type
<P-45>] [icmp-code <P-46>] [igmp-type <P-47>] [fragments] [precedence <P-
48>] [time-range <P-49>] [mirror <P-50>] [rate-limit <P-51> <P-52>]
[redirect <P-53>] [rate-limit <P-54> <P-55>] [tos <P-56> <P-57>] [time-
range <P-58>] [assign-queue <P-59>] [mirror <P-60>] [rate-limit <P-61> <P-
62>] [redirect <P-63>] [rate-limit <P-64> <P-65>] [dscp <P-66>] [time-range
<P-67>] [assign-queue <P-68>] [mirror <P-69>] [rate-limit <P-70> <P-71>]
[redirect <P-72>] [rate-limit <P-73> <P-74>] every [time-range <P-75>]
[assign-queue <P-76>] [mirror <P-77>] [rate-limit <P-78> <P-79>] [redirect
<P-80>] [rate-limit <P-81> <P-82>]
deny: Create a new rule for the current IP access-list: Specify packets to reject.
src: Specify the source IP and Mask
dst: Specify the destination IP and Mask
proto: Specify the protocol
[flag]: Specify TCP flag.
[icmp-type]: Specify ICMP type.
[icmp-code]: Specify ICMP code
[igmp-type]: Specify IGMP type.
[fragments]: Specify if rule matches on fragmented IP packets.
[precedence]: Precedence
[log]: Enable logging
[time-range]: Activate the rule at an absolute time or periodically.
[assign-queue]: Configure the User Priority (VLAN priority)assignment attribute.
[tos]: TOS
[log]: Enable logging
[time-range]: Activate the rule at an absolute time or periodically.
[assign-queue]: Configure the User Priority (VLAN priority)assignment attribute.
[dscp]: DSCP
[log]: Enable logging
54 RM CLI HiOS-2A MSP40
Release 6.1 09/2016