Mellanox MLNX-OS User Manual for SX1018HP Ethernet Managed Blade Switch

Rev 2.10
Mellanox Technologies
519
Mellanox Technologies Confidential
deny/permit (IPv4 TCP/UDP ACL rule)
[seq-number <sequence-number>] {permit | deny} {tcp | udp} {<source-ip>
[mask <ip>] | [any]} {<dest-ip> [mask <ip>]| [any]} [eq-source <port-number>]
[eq-destination <port-number>] [action <action-id>]
no <sequence-number>
Creates a rule for IPv4 UDP/TCP ACL.
The no form of the command deletes a rule from the ACL.
Syntax Description sequence-number Optional parameter to set a specific sequence number
for the rule. The range is:1-500.
deny | permit Determines the type of the rule, deny or permit action.
tcp | udp UDP or TCP rule transport type.
{any | <source-ip> [mask
<ip>]}
Sets source IP and optionally sets a mask for that IP
address. The “any” option will cause the rule not to
check the source IP.
{any | <destination-ip>
[mask <ip>]}
Sets destination IP and optionally sets a mask for that
MAC. The “any” option will cause the rule not to check
the destination MAC.
[eq-source <port-num-
ber>]
TCP/UDP source port number. Range is 0-65535.
[eq-destination <port-
number>]
TCP/UDP destination port number. Range is 0-65535.
Default No rule is added by default to access control list.
Default sequence number is in multiple of 10.
Configuration Mode Config IPv4 ACL
History 3.1.1400
Role admin
Example
switch (config ipv4 access-list my-list) # seq-number 10 deny tcp any
any eq-source 1200
switch (config ipv4 access-list my-list) #
Related Commands ipv4/mac access-list
ipv4/mac port access-group
Note