Owners manual
DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
57
specified sequence number will be assigned sequence based new sequence setting of the specified
access list.
When you manually assign the sequence number, it is better to have a reserved interval for future lower
sequence number entries. Otherwise, it will create extra effort to insert an entry with a lower sequence
number.
The sequence number must be unique in the domain of an access-list. If you enter a sequence number
that is already present, an error message will be shown.
To create a matching rule for an IP standard access list, only the source IP address or destination IP
address fields can be specified.
Example
This example shows how to create four entries for an IP extended access list, named Strict-Control.
These entries are: permit TCP packets destined to network 10.20.0.0, permit TCP packets destined to
host 10.100.1.2, permit all TCP packets go to TCP destination port 80 and permit all ICMP packets.
Switch# configure terminal
Switch(config)# ip extended access-list Strict-Control
Switch(config-ip-ext-acl)# permit tcp any 10.20.0.0 0.0.255.255
Switch(config-ip-ext-acl)# permit tcp any host 10.100.1.2
Switch(config-ip-ext-acl)# permit tcp any any eq 80
Switch(config-ip-ext-acl)# permit icmp any any
Switch(config-ip-ext-acl)#
This example shows how to create two entries for an IP standard access-list, named “std-ip”. These
entries are: permit IP packets destined to network 10.20.0.0, permit IP packets destined to host
10.100.1.2.
Switch# configure terminal
Switch(config)# ip access-list std-acl
Switch(config-ip-acl)# permit any 10.20.0.0 0.0.255.255
Switch(config-ip- acl)# permit any host 10.100.1.2
Switch(config-ip- acl)#
4-19 permit | deny (ipv6 access-list)
This command is used to add a permit entry or deny entry to the IPv6 access list. Use the no form of this
command to remove an entry from the IPv6 access list.
Extended IPv6 Access List:
[SEQUENCE-NUMBER] {permit | deny} tcp {any | host SRC-IPV6-ADDR | SRC-IPV6-
ADDR/PREFIX-LENGTH} [{eq | lt | gt | neq} PORT | range MIN-PORT MAX-PORT] {any | host
DST-IPV6-ADDR | DST-IPV6-ADDR/PREFIX-LENGTH} [{eq | lt | gt | neq} PORT | range MIN-PORT
MAX-PORT] [TCP-FLAG] [dscp VALUE] [flow-label FLOW-LABEL] [time-range PROFILE-NAME]
[SEQUENCE-NUMBER] {permit | deny} udp {any | host SRC-IPV6-ADDR | SRC-IPV6-
ADDR/PREFIX-LENGTH} [{eq | lt | gt | neq} PORT | range MIN-PORT MAX-PORT] {any | host
DST-IPV6-ADDR | DST-IPV6-ADDR/PREFIX-LENGTH} [{eq | lt | gt | neq} PORT | range MIN-PORT
MAX-PORT] [dscp VALUE] [flow-label FLOW-LABEL] [time-range PROFILE-NAME]
[SEQUENCE-NUMBER] {permit | deny} icmp {any | host SRC-IPV6-ADDR | SRC-IPV6-
ADDR/PREFIX-LENGTH} {any | host DST-IPV6-ADDR | DST-IPV6-ADDR/PREFIX-LENGTH}
[ICMP-TYPE [ICMP-CODE] | ICMP-MESSAGE] [dscp VALUE] [flow-label FLOW-LABEL] [time-
range PROFILE-NAME]