seq

Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.

Syntaxseq sequence-number {deny permit} {ip-protocol-number icmp

ip tcp udp} {source mask any host ip-address} {destination mask any host ip-address} [operator port [port]] [count [byte] log] [dscp value] [order] [monitor] [fragments]

Parameters

Enter a number from 0 to 4294967290.

sequence-

number

 

deny

Enter the keyword deny to configure a filter to drop packets

 

meeting this condition.

permit

Enter the keyword permit to configure a filter to forward

 

packets meeting this criteria.

ip-protocol-

Enter a number from 0 to 255 to filter based on the protocol

number

identified in the IP protocol header.

icmp

Enter the keyword icmp to configure an ICMP access list

 

filter.

ip

Enter the keyword ip to configure a generic IP access list.

 

The keyword ip specifies that the access list permits all IP

 

protocols.

tcp

Enter the keyword tcp to configure a TCP access list filter.

udp

Enter the keyword udp to configure a UDP access list filter.

source

Enter an IP address in dotted decimal format of the network

 

from which the packet was received.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x) or

 

A.B.C.D. The mask, when specified in A.B.C.D format, may be

 

either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject

 

to the filter.

host ip-address

Enter the keyword host and then enter the IP address to

 

specify a host IP address or hostname.

operator

(OPTIONAL) Enter one of the following logical operands:

 

• eq = equal to

 

• neq = not equal to

 

• gt = greater than

 

• lt = less than

 

• range = inclusive range of ports (you must specify two

 

ports for the port parameter.)

218

Access Control Lists (ACL)

Page 218
Image 218
Dell 9.7(0.0) manual Icmp, Tcp, Udp