HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference Guide - Release 4.x - Page 649

Chapter 11 I Commands ip access-list Send documentation comments to [email protected] ip access-list To configure IP access control lists (ACLs), use the ip access-list command in configuration mode. To negate a previously issued command or revert to factory defaults, use the no form of the command. ip access-list list-name {deny | permit} ip-protocol {src-addr src-wildcard} {dest-addr dest-wildcard | operator port-value} [operator port port-value] [established | icmp-type icmp-value] [tos tos-value] [log-deny] Syntax Description list-name deny permit ip-protocol src-addr src-wildcard dest-addr dest-wildcard Configures an access list with this name.The maximum length is 64 characters. Denies access if the conditions match. Allows access if the conditions match. Specifies the name or number (integer range from 0 to 255) of an IP protocol. The IP protocol name can be icmp, ip, tcp, or udp. Specifies the network from which the packet is sent. There are two ways to specify the source: • A 32-bit quantity in four-part, dotted-decimal format • A keyword any as an abbreviation for a destination and a destination-wildcard of 0.0.0.0 255.255.255.255 Applies the wildcard bits to the source. Each wildcard bit set to zero indicates that the corresponding bit position in the packet's IP address must exactly match the bit value in the corresponding position of the packet's ip address or it will not be considered a match to this access list. There are two ways to specify the destination wildcard: • A 32-bit quantity in four-part, dotted-decimal format • A keyword any as an abbreviation for a destination and a destination-wildcard of 0.0.0.0 255.255.255.255 Specifies the network from which the packet is sent. There are two ways to specify the destination: • A 32-bit quantity in four-part, dotted-decimal format • A keyword any as an abbreviation for a destination and a destination-wildcard of 0.0.0.0 255.255.255.255 Applies the wildcard bits to the destination. There are two ways to specify the destination wildcard: • A 32-bit quantity in four-part, dotted-decimal format • A keyword any as an abbreviation for a destination and a destination-wildcard of 0.0.0.0 255.255.255.255 OL-18089-01, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family Command Reference 11-43