Enterasys Networks XSR CLI - page 631

General Security Commands
XSR CLI Reference Guide 16-87
Syntax
access-list list# [[{insert | replace | move}] [{entry# destination source1
[source2]]}{deny | permit}{log} {srcIpAddr [srcWildCardBits]| host srcIpAddr |
any}
Syntax of the “no” Form
Thenoformofthiscommandremovesthedefinedaccesslistorentries(oneormore)inalist:
no access-list list-number [ent1 [ent2]]
Mode
Globalconfiguration:XSR(config)#
Default
Noaccesslistdefined(allaccesspermitted)
list# Standardaccesslistnumberrangingfrom1to99.
insert Newaccessentryisinsertedbeforeanexistingentry#inanACL.Theshow
access-listcommandsequentiallynumbersentriesforthispurpose.
replace Sameasabove,exceptthenewaccessentryreplacesanentry#intheexisting
ACL(theentry#mustalreadyexist.)
move MovesasequenceofACLentriesinfrontofanotherentry.
entry#SequentialentrynumberinACLtoadd/deleterangingfrom1to999.
destination Positionbeforewhichentriesaretobemoved.Range:1‐999.
source1 SequentialnumberoffirstACLentrytomove.Range:1‐999.
source2 SequentialnumberoflastACLentrytomove.Range:1‐999.
deny Deniesaccessifspecifiedconditionsaremet.
permit Permitsaccessifconditionsmet.
log EnablesalarmloggingandreportingofsourceIPaddressesforconfiguredACL
entries.
srcIpAddr IdentifiesthesourcebyIPaddress.
srcWildCard
Bits
Bitstoignoreinthesourceaddress.Amaskof0.0.0.225impliesonlythemost
importantbitsofthesourceaddressareconsidered.
host Marksonlytheexactsourceaddressmatchingthecondition.Sameas
srcWildCardBits=0.0.0.0.
any Marksanysourceaddressmatchingthecondition.SameassrcWildCardBits=
255.255.255.255.
list-number Thestandardaccesslistnumberrangingfrom1to99.
ent1 Optionalsingleentrynumber,orthefirstentrynumberintherangeto
beremoved.Ifunspecified,theentireACLisremoved.
ent2 Optionallastentrynumberintherangetoberemoved.