Specifications

set security acl
Chapter 14
Security ACL Commands
461
By ICMP packets
set security acl ip acl-name {permit [cos cos] | deny} icmp {source-ip-addr
mask | any} {destination-ip-addr mask | any} [type icmp-type][code icmp-code]
[[precedence precedence][tos tos] | [dscp codepoint]]
[before editbuffer-index | modify editbuffer-index] [hits]
By TCP packets
set security acl ip acl-name {permit [cos cos] | deny}
tcp {source-ip-addr mask | any [operator port [port2]]}
{destination-ip-addr mask | any [operator port [port2]]}
[[precedence precedence][tos tos] | [dscp codepoint]]
[established] [before editbuffer-index | modify editbuffer-index] [hits]
By UDP packets
set security acl ip acl-name {permit [cos cos] | deny} udp {source-ip-addr mask
| any [operator port [port2]]} {destination-ip-addr mask | any [operator port
[port2]]} [[precedence precedence][tos tos] | [dscp codepoint]]
[before editbuffer-index | modify editbuffer-index] [hits]
acl-name Security ACL name. ACL names must be unique
within the UNIVERGE WL Controller, must start with
a letter, and are case-insensitive. Specify an ACL name
of up to 32 of the following characters:
• Letters a through z and A through Z
• Numbers 0 through 9
• Hyphen (-), underscore (_), and period (.)
UNIVERGE WL Control System recommends that you
do not use the same name with different capitalizations
for ACLs. For example, do not configure two separate
ACLs with the names acl_123 and ACL_123.
Note: In an ACL name, do not include the term all,
default-action, map, help, or editbuffer.
permit Allows traffic that matches the conditions in the ACE.