Reference Guide

304 | ip access-list session Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
ip access-list session
ip access-list session <accname>
<source> <dest> <service> <action> [<extended action>]
ipv6 [alias | any | host | network | user]
no ...
Description
This command configures an access control list (ACL) session. To create IPv6 specific rules, use the ipv6
keyword.
Syntax
This command includes the following configuration parameters
Parameter Description
<accname> Enter a name for this ACL
ipv6 Use the ipv6 keyword to create IPv6 specific rules.
<source> The traffic source, which can be one of the following:
alias: specify the network resource (use the netdestination command to configure aliases; use the show
netdestination command to see configured aliases)
any: match any traffic
host: specify a single host IP address
localip: specify the local IP address to match traffic
network: specify the IP address and netmask
user: represents the IP address of the user
<dest> The traffic destination, which can be one of the following:
alias: specify the network resource (use the netdestination command to configure aliases; use the show
netdestination command to see configured aliases)
any: match any traffic
host: specify a single host IP address
localip: specify the local IP address to match traffic
network: specify the IP address and netmask
user: represents the IP address of the user
<service> Network service, which can be one of the following:
IP protocol number (0-255)
name of a network service (use the show netservice command to see configured services)
any: match any traffic
tcp: specify the TCP port number (0-65535)
udp: specify the UDP port number (0-65535)
<action> Action if rule is applied, which can be one of the following:
deny: reject packets
dst-nat: perform destination NAT on packets
dual-nat: perform both source and destination NAT on packets
permit: forward packets
redirect: specify the location to which packets are redirected, which can be one of the following:
 datapath destination ID (0-65535)
 esi-group: specify the ESI server group configured with the esi group command
 opcode: specify the datapath destination ID (0x33, 0x34, or 0x82). Do not use this parameter without
proper guidance from Dell.
tunnel: specify the ID of the tunnel configured with the interface tunnel command
src-nat: perform source NAT on packets
captive: perform captive portal for IPv6