Home » Dell Manuals » Hubs & Switches » Dell PowerConnect 3548 » Manual Viewer

Dell PowerConnect 3548 Command Line Interface Guide - Page 93

deny (IP), ip access-list, permit, any dscp

View all Dell PowerConnect 3548 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 93 highlights

• source-port - Specifies the UDP/TCP source port. (Range: 1 - 65535) • source-port-wildcard -Specifies wildcard bits to be applied to the source port by placing 1s in bit positions to be ignored. • flags list-of-flags - Specifies the list of TCP flags. If a flag is set, it is prefixed by "+". If a flag is not set, it is prefixed by "-". Available options are +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and -fin. The flags are concatenated to a one string. For example: +fin-ack. Default Configuration No IPv4 ACL is defined. Command Mode IP-Access List Configuration mode. User Guidelines • Use the ip access-list Global Configuration mode command to enable the IP-Access List Configuration mode. • Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an implied deny-any-any condition exists at the end of the list and those packets that do not match the conditions defined in the permit statement are denied. Example The following example shows how to define a permit statement for an IP ACL. Console(config)# ip access-list ip-acl1 Console(config-ip-al)# permit rsvp 192.1.1.1 0.0.0.0 any dscp 56 deny (IP) The deny IP-Access List Configuration mode command denies traffic if the conditions defined in the deny statement match. Syntax • deny [disable-port] {any| protocol} {any|{source source-wildcard}} {any|{destination destination- wildcard}} [dscp number | ip-precedence number] • deny-icmp [disable-port] {any|{source source-wildcard}} {any|{destination destination-wildcard}} {any|icmp-type} {any|icmp-code} [dscp number | ip-precedence number] • deny-igmp [disable-port] {any|{source source-wildcard}} {any|{destination destination-wildcard}} {any|igmp-type} [dscp number | ip-precedence number] ACL Commands 93

Section	Page
Using the CLI	25
CLI Command Modes	25
Introduction	25
User EXEC Mode	26
Privileged EXEC Mode	27
Global Configuration Mode	27
Interface Configuration Mode and Specific Configuration Modes	28
Starting the CLI	29
Editing Features	30
Setup Wizard	31
Terminal Command Buffer	31
Negating the Effect of Commands	31
Command Completion	32
Keyboard Shortcuts	32
CLI Command Conventions	32
Command Groups	33
Introduction	33
Command Groups	33
AAA Commands	35
ACL Commands	35
Address Table Commands	36
Clock Commands	37
Configuration and Image Files Commands	38
DHCP Snooping Commands	39
Ethernet Configuration Commands	40
GVRP Commands	41
IGMP Snooping Commands	41
IP Addressing Commands	42
IPv6 Addressing Commands	43
LACP Commands	44
Line Commands	44
Line Commands	45
LLDP Commands	45
Login Banner Commands	46
Management ACL Commands	46
PHY Diagnostics Commands	47
Power-over-Ethernet Commands	47
Port Channel Commands	48
Port Monitor Commands	48
QoS Commands	48
RADIUS Commands	49
RMON Commands	50
SNMP Commands	50
Spanning Tree Commands	51
SSH Commands	53
Syslog Commands	53
System Management Commands	54
TACACS Commands	55
TIC Commands	55
Tunnel Commands	56
User Interface Commands	57
VLAN Commands	57
Voice VLAN Commands	59
Web Server Commands	59
802.1x Commands	60
Command Modes	63
GC (Global Configuration) Mode	63
IC (Interface Configuration) Mode	68
LC (Line Configuration) Mode	72
MA (Management Access-level) Mode	72
MC (MST Configuration) Mode	72
ML (MAC Access-List) Mode	73
PE (Privileged EXEC) Mode	73
SP (SSH Public Key) Mode	76
UE (User EXEC) Mode	76
VC (VLAN Configuration) Mode	78
IPAL (IP-Access List Configuration) Mode	79
MAL (MAC-Access List Configuration) Mode	79
AAA Commands	81
aaa authentication login	81
aaa authentication enable	82
login authentication	83
enable authentication	84
ip http authentication	85
ip https authentication	86
show authentication methods	87
password	88
enable password	89
username	89
ACL Commands	91
ip access-list	91
permit (IP)	91
deny (IP)	93
mac access-list	95
permit (MAC)	96
deny (MAC)	97
service-acl	98
show access-lists	99
show interfaces access-lists	99
Address Table Commands	101
bridge address	101
bridge multicast filtering	102
bridge multicast address	102
bridge multicast forbidden address	104
bridge multicast unregistered	105
bridge multicast forward-all	105
bridge multicast forbidden forward-all	106
bridge aging-time	107
clear bridge	108
port security	109
port security mode	110
port security max	110
port security routed secure-address	111
show bridge address-table	112
show bridge address-table static	113
show bridge address-table count	114
show bridge multicast address-table	115
show bridge multicast filtering	117
show bridge multicast address-table static	118
show bridge multicast filtering	119
show ports security	120
show ports security addresses	122
Clock	125
clock set	125
clock source	126
clock timezone	126
clock summer-time	127
sntp authentication-key	128
sntp authenticate	129
sntp trusted-key	130
sntp client poll timer	131
sntp broadcast client enable	131
sntp anycast client enable	132
sntp client enable	132
sntp client enable (Interface)	133
sntp unicast client enable	134
sntp unicast client poll	135
sntp server	135
show clock	137
show sntp configuration	138
show sntp status	139
Configuration and Image Files	141
copy	141
delete	144
delete startup-config	144
dir	145
more	146
rename	147
boot system	148
show running-config	149
show startup-config	150
show bootvar	152
DHCP Snooping	153
ip dhcp snooping	153
ip dhcp snooping vlan	153
ip dhcp snooping trust	154
ip dhcp snooping information option allowed-untrusted	155
ip dhcp snooping verify	155
ip dhcp snooping database	156
ip dhcp snooping database update-freq	157
ip dhcp snooping binding	157
clear ip dhcp snooping database	158
show ip dhcp snooping	159
show ip dhcp snooping binding	160
Ethernet Configuration Commands	163
interface ethernet	163
interface range ethernet	163
shutdown	164
description	165
speed	166
duplex	166
negotiation	167
flowcontrol	168
mdix	168
back-pressure	169
clear counters	170
set interface active	170
show interfaces advertise	171
show interfaces configuration	172
show interfaces status	174
show interfaces description	176
show interfaces counters	177
port storm-control include-multicast	179
port storm-control broadcast enable	180
port storm-control broadcast rate	181
show ports storm-control	182
GVRP Commands	183
gvrp enable (Global)	183
gvrp enable (Interface)	183
garp timer	184
gvrp vlan-creation-forbid	185
gvrp registration-forbid	186
clear gvrp statistics	186
show gvrp configuration	187
show gvrp statistics	188
show gvrp error-statistics	189
IGMP Snooping Commands	191
ip igmp snooping (Global)	191
ip igmp snooping (Interface)	191
ip igmp snooping mrouter	192
ip igmp snooping host-time-out	193
ip igmp snooping mrouter-time-out	193
ip igmp snooping leave-time-out	194
ip igmp snooping querier enable	195
ip igmp snooping querier address	196
show ip igmp snooping mrouter	197
show ip igmp snooping interface	198
show ip igmp snooping groups	199
IP Addressing Commands	201
ip address	201
ip address dhcp	202
ip default-gateway	203
show ip interface	203
arp	204
arp timeout	205
clear arp-cache	206
show arp	206
ip domain-lookup	207
ip domain-name	208
ip name-server	208
ip host	209
clear host	210
clear host dhcp	210
show hosts	211
IPv6 Addressing	213
ipv6 enable	213
ipv6 address autoconfig	214
ipv6 icmp error-interval	214
show ipv6 icmp error-interval	215
ipv6 address	216
ipv6 address link-local	217
ipv6 unreachables	218
ipv6 default-gateway	219
ipv6 mld join-group	220
ipv6 mld version	220
show ipv6 interface	221
show IPv6 route	224
ipv6 nd dad attempts	225
ipv6 host	226
ipv6 neighbor	227
ipv6 set mtu	228
show ipv6 neighbors	229
clear ipv6 neighbors	230
LACP Commands	231
lacp system-priority	231
lacp port-priority	231
lacp timeout	232
show lacp ethernet	233
show lacp port-channel	236
Line Commands	237
line	237
speed	238
autobaud	238
exec-timeout	239
history	240
history size	240
terminal history	241
terminal history size	242
show line	242
Management ACL	245
management access-list	245
permit (Management)	247
deny (Management)	248
management access-class	249
show management access-list	249
show management access-class	250
LLDP Commands	251
lldp enable (global)	251
lldp enable (interface)	251
lldp timer	252
lldp hold-multiplier	253
lldp reinit-delay	254
lldp tx-delay	255
lldp optional-tlv	255
lldp management-address	256
lldp med enable	257
lldp med network-policy (global)	258
lldp med network-policy (interface)	259
lldp med location	259
clear lldp rx	260
show lldp configuration	261
show lldp med configuration	262
show lldp local	263
show lldp neighbors	265
Login Banner	267
banner exec	267
banner login	269
banner motd	271
exec-banner	273
login-banner	273
motd-banner	274
show banner	275
PHY Diagnostics Commands	277
test copper-port tdr	277
show copper-ports tdr	278
show copper-ports cable-length	278
Power over Ethernet Commands	281
power inline	281
power inline powered-device	281
power inline priority	282
power inline usage-threshold	283
power inline traps enable	284
show power inline	284
Port Channel Commands	291
interface port-channel	291
interface range port-channel	291
channel-group	292
show interfaces port-channel	293
Port Monitor Commands	295
port monitor	295
show ports monitor	296
QoS Commands	299
qos	299
show qos	299
priority-queue out num-of-queues	300
traffic-shape	301
rate-limit (Ethernet)	301
wrr-queue cos-map	302
show qos interface	303
qos map dscp-queue	305
qos trust (Global)	306
qos trust (Interface)	307
qos cos	307
show qos map	308
RADIUS Commands	311
radius-server host	311
radius-server key	312
radius-server retransmit	313
radius-server source-ip	314
radius-server source-ipv6	314
radius-server timeout	315
radius-server deadtime	316
show radius-servers	316
RMON Commands	319
show rmon statistics	319
rmon collection history	321
show rmon collection history	322
show rmon history	323
rmon alarm	326
show rmon alarm-table	328
show rmon alarm	329
rmon event	330
show rmon events	331
show rmon log	333
rmon table-size	334
SNMP Commands	335
snmp-server community	335
snmp-server view	336
snmp-server group	338
snmp-server user	340
snmp-server engineID local	341
snmp-server enable traps	343
snmp-server filter	343
snmp-server host	344
snmp-server v3-host	346
snmp-server trap authentication	348
snmp-server contact	348
snmp-server location	349
snmp-server set	349
show snmp	350
show snmp engineid	352
show snmp views	353
show snmp groups	353
show snmp filters	355
show snmp users	356
Spanning-Tree Commands	357
spanning-tree	357
spanning-tree mode	357
spanning-tree forward-time	358
spanning-tree hello-time	359
spanning-tree max-age	360
spanning-tree priority	360
spanning-tree disable	361
spanning-tree cost	361
spanning-tree port-priority	362
spanning-tree portfast	363
spanning-tree link-type	364
spanning-tree pathcost method	364
spanning-tree bpdu	365
clear spanning-tree detected-protocols	366
spanning-tree mst priority	366
spanning-tree mst max-hops	367
spanning-tree mst port-priority	368
spanning-tree mst cost	369
spanning-tree mst configuration	369
instance (mst)	370
name (mst)	371
revision (mst)	372
show (mst)	372
exit (mst)	373
abort (mst)	374
show spanning-tree	375
spanning-tree guard root	389
SSH Commands	391
ip ssh port	391
ip ssh server	391
crypto key generate dsa	392
crypto key generate rsa	393
ip ssh pubkey-auth	393
crypto key pubkey-chain ssh	394
user-key	395
key-string	396
show ip ssh	398
show crypto key mypubkey	399
show crypto key pubkey-chain ssh	400
Syslog Commands	401
logging on	401
logging	401
logging console	403
logging buffered	404
logging buffered size	404
clear logging	405
logging file	406
clear logging file	406
aaa logging	407
file-system logging	407
management logging	408
show logging	409
show logging file	411
show syslog-servers	412
System Management	415
ping	415
traceroute	417
telnet	420
resume	423
reload	423
hostname	424
service cpu-utilization	425
stack master	425
stack reload	426
show stack	427
show users	428
show sessions	429
show system	430
show version	431
asset-tag	432
show system id	433
show cpu utilization	434
TACACS+ Commands	435
tacacs-server host	435
tacacs-server key	436
tacacs-server timeout	437
tacacs-server source-ip	437
show tacacs	438
TIC Commands	441
passwords min-length	441
password-aging	442
passwords aging	442
passwords history	443
passwords history hold-time	444
passwords lockout	445
aaa login-history file	446
set username active	446
set line active	447
set enable-password active	447
show passwords configuration	448
show users login-history	450
show users accounts	451
Tunnel	453
interface tunnel	453
tunnel mode ipv6ip	453
tunnel isatap router	454
tunnel source	455
tunnel isatap query-interval	456
tunnel isatap solicitation-interval	457
tunnel isatap robustness	458
show ipv6 tunnel	458
User Interface	461
enable	461
disable	461
login	462
configure	463
exit (Configuration)	463
exit	464
end	464
help	465
terminal datadump	466
show history	467
show privilege	468
VLAN Commands	469
vlan database	469
vlan	469
interface vlan	470
interface range vlan	471
name	471
switchport access vlan	472
switchport trunk allowed vlan	473
switchport trunk native vlan	473
switchport general allowed vlan	474
switchport general pvid	475
switchport general ingress-filtering disable	476
switchport general acceptable-frame-type tagged-only	476
switchport forbidden vlan	477
switchport mode	478
switchport customer vlan	479
switchport protected	479
map protocol protocols-group	480
switchport general map protocols-group vlan	481
ip internal-usage-vlan	482
mac-to-vlan	483
show vlan mac-to-vlan	484
show vlan	484
show vlan protocols-groups	485
show vlan internal usage	486
show interfaces switchport	487
Voice VLAN	493
voice vlan id	493
voice vlan oui-table	493
voice vlan cos	495
voice vlan aging-timeout	496

Match case Limit results 1 per page

ACL Commands

•

source-port

— Specifies the UDP/TCP source port. (Range: 1 - 65535)

•

source-port-wildcard

—Specifies wildcard bits to be applied to the source port by placing 1s in bit

positions to be ignored.

•

flags

list-of-flags

— Specifies the list of TCP flags. If a flag is set, it is prefixed by "+". If a flag is

not set, it is prefixed by "-". Available options are

+urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack,

-psh, -rst, -syn and -fin

. The flags are concatenated to a one string. For example:

+fin-ack

Default Configuration

No IPv4 ACL is defined.

Command Mode

IP-Access List Configuration mode.

User Guidelines

•

Use the

ip access-list

Global Configuration mode command to enable the IP-Access List

Configuration mode.

•

Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE

is added, an implied

deny-any-any

condition exists at the end of the list and those packets that do not

match the conditions defined in the permit statement are denied.

Example

The following example shows how to define a permit statement for an IP ACL.

deny (IP)

The

deny

IP-Access List Configuration mode command denies

traffic if the conditions defined in the

deny statement match.

Syntax

•

deny

[

disable-port

] {

any

protocol

} {

any

source source-wildcard

}} {

any

destination destination-

wildcard

}} [

dscp

number

ip-precedence

number

]

•

deny-icmp

[

disable-port

] {

any

source source-wildcard

}} {

any

destination destination-wildcard

}}

{

any

icmp-type

} {

any

icmp-code

} [

dscp

number

ip-precedence

number

]

•

deny-igmp

[

disable-port

] {

any

source source-wildcard

}} {

any

destination destination-wildcard

}}

{

any

igmp-type

} [

dscp

number

ip-precedence

number

]

Console(config)#

ip access-list

ip-acl1

Console(config-ip-al)#

permit

rsvp 192.1.1.1 0.0.0.0

any dscp