Connectivity Guide
permit ip
Congures a lter to permit all or specic packets from an IPv4 address.
Syntax
permit ip [A.B.C.D | A.B.C.D/x | any | host ip-address] [[A.B.C.D | A.B.C.D/x |
any | host ip-address] [capture | count | dscp value | fragment | log]
Parameters
• A.B.C.D — Enter the IPv4 address in dotted decimal format.
• A.B.C.D/x — Enter the number of bits to match to the dotted decimal address.
• any — (Optional) Enter the keyword any to specify any source or destination IP address.
• host ip-address — (Optional) Enter the IPv4 address to use a host address only.
• capture — (Optional) Capture packets the lter processes.
• count — (Optional) Count packets the lter processes.
• byte — (Optional) Count bytes the lter processes.
• dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63.
• fragments — (Optional) Use ACLs to control packet fragments.
• log — (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not congured
Command Mode IPV4-ACL
Usage Information OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes increment. The
no version of this command removes the lter.
The count, byte, and log options are not supported on the S5148F-ON platform.
Example
OS10(conf-ipv4-acl)# permit ip any any capture session 1
Supported Releases 10.2.0E or later
permit ipv6
Congures a lter to permit all or specic packets from an IPv6 address.
Syntax
permit ipv6 [A::B | A::B/x | any | host ipv6-address] [A::B | A:B/x | any |
host ipv6-address] [capture | count | dscp value | fragment | log]
Parameters
• A::B — (Optional) Enter the source IPv6 address from which the packet was sent and the destination
address.
• A::B/x — (Optional) Enter the source network mask in /prex format (/x) and the destination mask.
• any — (Optional) Enter the keyword any to specify any source or destination IP address.
• host ipv6–address — Enter the IPv6 address to use a host address only.
• capture — (Optional) Enter to capture packets the lter processes.
• count — (Optional) Enter to count packets the lter processes.
• byte — (Optional) Enter to count bytes the lter processes.
• dscp value — (Optional) Enter to deny a packet based on the DSCP values, from 0 to 63.
• fragment — (Optional) Enter to use ACLs to control packet fragments.
918 Access Control Lists