CLI Guide

Security Commands 1166
permit {gigabitethernet unit/slot/port | vlan vlan-id | port-channel port-
channel-number | tengigabitethernet unit/slot/port |fortygigabitethernet
unit/slot/port} [service service] [priority priority-value]
permit service service [priority priority-value]
permit priority priority-value
• gigabitethernet unit/slot/port — A valid Gigabit Ethernet routed port
number.
• vlan vlan-id — A valid VLAN number.
• port-channel port-channel-number — A valid port channel number.
• tengigabitethernet unit/slot/port — A valid 10-Gigabit Ethernet routed
port number.
• fortygigabitethernet unit/slot/port – A valid 40-Gigabit Ethernet routed
port number.
• ip-address — Source IP address.
• mask mask — Specifies the network mask of the source IP address.
• mask prefix-length — Specifies the number of bits that comprise the
source IP address prefix. The prefix length must be preceded by a forward
slash (/). (Range: 0–32)
• service service — Indicates service type. It can be one of the following:
telnet, ssh, http, https, tftp, snmp, sntp, or any. The any keyword indicates
that the service match for the ACL is effectively “don’t care”.
• priority priority-value — Priority for the rule. (Range: 1 – 64)
Default Configuration
This command has no default configuration.
Command Mode
Management Access-list Configuration mode
User Guidelines
Rules with gigabitethernet, tengigabitethernet, fortygigabitethernet, vlan,
and port-channel parameters are valid only if an IP address is defined on the
appropriate interface.