Release Notes

ip access-list session
ip access-list session <accname>
<source> <dest> <service> <action> [<extended action>]
ipv6 <source> <dest> <service> <action> [<extended action>]
no ...
Description
This command configures an access control list (ACL) session. To create IPv6 specific rules, use the ipv6
keyword.
Syntax
Parameter Description
<accname>
Name of an access control list session.
ipv6
Use the ipv6 keyword to create IPv6 specific rules.
<source>
The traffic source, which can be one of the following:
alias: specify the network resource (use the netdestination command to configure
aliases; use the show netdestination command to see configured aliases)
any: match any traffic
host: specify a single host IP address
localip: specify the local IP address to match traffic
network: specify the IP address and netmask
user: represents the IP address of the user
<dest>
The traffic destination, which can be one of the following:
alias: specify the network resource (use the netdestination command to configure
aliases; use the show netdestination command to see configured aliases)
any: match any traffic
host: specify a single host IP address
localip: specify the local IP address to match traffic
network: specify the IP address and netmask
user: represents the IP address of the user
<service>
Network service, which can be one of the following:
IP protocol number (0-255)
name of a network service (use the show netservice command to see configured
services)
any: match any traffic
app: application name
appcategory: application category name
tcp destination port number: specify the TCP port number (0-65535)
tcp source: TCP/UDP source port number
udp: specify the UDP port number (0-65535)
web-cc-category: name of an a web content category. For the full list of available web
content categories, issue the command show web-cc categories.
web-cc-reputation: any of the predefined web content reputation levels.
l high-risk
l low-risk
l moderate-risk
l suspicious
l trustworthy
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide ip access-list session | 440