Reference Guide

mask
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or non-
contiguous.
any Enter the keyword any to specify that all routes are subject to the
filter.
host
ip-address
Enter the keyword host then the IP address to specify a host IP
address.
dscp Enter this keyword dscp to deny a packet based on the DSCP value.
The range is from 0 to 63.
operator (OPTIONAL) Enter one of the following logical operand:
eq = equal to
neq = not equal to
gt = greater than
lt = less than
range = inclusive range of ports (you must specify two ports
for the port command)
port port
Enter the application layer port number. Enter two port numbers if
using the range logical operand. The range is from 0 to 65535.
destination
Enter the IP address of the network or host to which the packets are
sent.
mask
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or non-
contiguous.
count (OPTIONAL) Enter the keyword count to count packets processed
by the filter.
byte (OPTIONAL) Enter the keyword byte to count bytes processed by
the filter.
log (OPTIONAL, E-Series only) Enter the keyword log to have the
information kept in an ACL log file. Supported on Jumbo-enabled line
cards only.
order (OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry. The range is from 0 to 254 (where 0 is the highest
priority and 254 is the lowest; lower-order numbers have a higher
priority) If you did not use the keyword
order, the ACLs have the
lowest order by default (255).
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule is applied to the monitored interface. For more
information, refer to the section “Flow-based Monitoring” in the Port
Monitoring chapter of the
FTOS Configuration Guide
.
fragments Enter the keyword fragments to use ACLs to control packet
fragments.
177