Motorola 2.1 User Manual Page 450

  • Download
  • Add to my manuals
  • Print
  • Page
    / 713
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 449
Standard ACL Instance 15-9
15.1.8 permit
Standard ACL Config Commands
Use this command to permit specific packets.
Syntax
permit [<SOURCE-IP/MASK>|any|host <A.B.C.D>] {log (rule-precedence <1-500>)}
Parameterspermit [<SOURCE-IP/MASK>|any|host <A.B.C.D>] {rule-precedence <1-500>}
Use this command to allow traffic based on the source IP address or network address. The last ACE in the access list is
an implict deny statement.
Whenever the interface receives the packet, its content is checked against all the ACE’s in the ACL. It is allowed based
on the ACL configuration.
Example
The example below permits all traffic to the interface.
RFS7000(config-std-nacl)#permit any rule-precedence 50
RFS7000(config-std-nacl)#
The example below permits traffic from the source network and provides a log message.
RFS7000(config-std-nacl)#permit xxx.xxx.1.0/24 log rule-precedence 60
RFS7000(config-std-nacl)#
<SOURCE-IP/MASK> The source IP address range to match. Forwards packets from the source
specified by the <SOURCE-IP/MASK> parameter.
any Specifies a source IP address and mask of value 0.0.0.0 and 255.255.255.255.
host <A.B.C.D> Specifies the IP address of a single host. Forwards packets from the specified
host specified by the <A.B.C.D> parameter.
<A.B.C.D> – The exact source IP address to match.
log Optional. Logs matches against this entry.
rule-precedence <1-500> Optional. Configures the precedence of this entry in this standard ACL.
NOTE The log option is functional only for router ACLs. The log option outputs an
informational logging message about the packet matching the entry sent to the
console.
Page view 449
1 2 ... 445 446 447 448 449 450 451 452 453 454 455 ... 712 713

Comments to this Manuals

No comments