Enterasys Networks XSR CLI Additional Syntax

General Security Commands
XSR CLI Reference Guide 16-85
Additional Syntax
The access-listcommandalsoprovidesthemoveoption,expressedinthefollowingsyntax:
access-list list-number move destination src1 [src2]
Syntax of the “no” Form
Thenoformofthiscommandremovesthedefinedaccesslist:
no access-list list-number [ent1][ent2]]
srcWild
CardBits
Specifiesbitstoignoreinthesourceaddress.
Note: The srcWildCardBits/dstWildCardBits mask specifies bits to ignore (which allow
any value where the bits are set), as opposed to the traditional method of specifying
bits to keep.
host Onlytheexactsourceaddressmatchesthecondition.Sameas
srcWildCardBits=0.0.0.0.
any Anysourceaddressmatchesthecondition.SameassrcWildCardBits=
255.255.255.255.
qualifier Valueappliedtothesourceport:eq‐equalthan,neq‐notequalto,lt‐less
than,gt‐greaterthan.
source-port Optionalsourceportnumber(0‐65535).
range Valuemustbewithintheminimumandmaximumsourceanddestination
portrange.
min-sport Lowestportnumberfrom0to65535.Combinewithmax‐sport.
max-sport Highestportnumberfrom0to65535.Normallygreaterthanmin‐sportbutif
lessthanmin,valuesareswapped.
dstIPAddr ThedestinationexpressedbyIPaddress.
dstWild
CardBits
Specifiesbitstoignoreinthedestinationaddress.
destn-port Destinationportnumber.Range:0to65535.
type,code ICMPmessagetypeonly(0‐255)andcode(0‐255).
established MatchesifaTCPconnectionisalreadyestablished,thatis,ifeitherACKor
RSTbitsaresetintheTCPheader.
Note: Source and destination ports are defined only for TCP or UDP. A message type and code can
be defined for ICMP.
list# ACLnumber,rangingfrom100‐199.
move MovesasequenceofACLentriesinfrontofanotherentry.Range:1‐999.
destination NumberoftheexistingACLentrybeforewhichsubsequententryorrangeof
entriesistobemoved.Range:1to999.Ifbeingmovedtotheend,useanon‐
existentnumber(e.g.,999).
src1 Singleentrynumber,orthefirstentrynumberintherangetobemovedbefore
thedestination.Range:1to999.
src2 Optionallastentrynumberintherangetobemoved.Range:1to999.Ifnot
specified,onlyoneentryismoved.