Specifications

ACCESS-LIST 12 - 19
Usage Guidelines
Use this command to permit traffic between networks/hosts based on the protocol type selected in the access list. The
following protocols are supported:
•IP
•ICMP
•ICP
•UDP
•PROTO
The last ACE in the access list is an implicit deny statement.
Whenever the interface receives the packet, its content is checked against all the ACEs in the ACL. It is allowed based on
the ACL configuration.
• Filtering on TCP/UDP allows the user to specify port numbers as filtering criteria
• Select ICMP to allow/deny packets
• Selecting ICMP allows the filter of ICMP packets based on type and node.
range
<START-PORT>
<END-PORT>
Identifies the destination port range
• <START-PORT> – Specify the start of the range.
• <END-PORT> – Specify the end of the range.
log Logs all permit events
mark [8021p <0-7>|
dscp <0-63>]
Marks packets that match the ACL rule
• 8021p <0-7> – Modifies 802.1p VLAN user priority from 0 - 7
• dscp <0-63> – Modifies DSCP TOS bits in the IP header from 0 - 63
rule-precedence <1-5000> Sets the rule precedence. Rules are checked in the order of their rule precedence
• <1-5000> – Specify the rule precedence from 1 - 5000.
rule-description
<RULE-DESCRIPTION>
Optional. Sets the rule description
• <RULE-DESCRIPTION> – Provide a description of the rule. The description should not
exceed 128 characters.
NOTE: The log option is functional only for router ACL’s. The log option displays an
informational logging message about the packet matching the entry sent to the console.