Chapter 6 X330WAN CLI Commands

Syntax

[no] ip access-group<policy-list-number> <direction>

Parameters

policy-list-numberAn integer from 100 to 149, where 0 is the default list.

directioninout

Example

X330WAN-2DS1-1(config-if:FastEthernet1)# ip access-group 110 out

ip access-list

Use the ip access-listcommand to create a specific Policy rule. Each rule pertains to the source IP address, the destination IP address, the protocol, the protocol ports (TCP/UDP, if relevant), and to the ACK bit (in TCP protocol). The no form of this command deletes a specific rule.

The syntax for this command is:

[no] ip access-list<policy-list-number> <access-list-index> <action> <protocol> {<source-ip> <source-wildcard>anyhost <source-ip>} [<operator> <port> [<port]] {<destination-ip> <destination- wildcard>anyhost <destination-ip>}[<operator> <port> [<port>]][established] [precedence]

Parameters

policy-list-number

access-list-index

action

protocol

source-ip

source-wildcard

operator

port

destination-ip

destination-wildcard

An integer from 100 to 149.

An integer from 100 to 149.

permitdenydeny-and-notifyfwd0-7 composite

op name

iptcpudpinteger from 1 to 255.

IP network

IP network wildcard

eqltgtrange

An integer from 1 to 65535.

IP network

IP network wildcard

210

Avaya X330WAN User’s Guide

Page 232
Image 232
Avaya X330WAN manual Ip access-list