Home » Dell Manuals » Hubs & Switches » Dell C9010 Modular Chassis Switch » Manual Viewer

Dell C9010 Modular Chassis Switch EMC Networking Command-Line Reference Guide - Page 248

permit tcp, source, ip-address, operator, port port, destination

View all Dell C9010 Modular Chassis Switch manuals

Add to My Manuals
Save this manual to your list of manuals

Page 248 highlights

permit tcp To pass TCP packets meeting the filter criteria, configure a filter. C9000 Series Syntax Parameters permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [bytes]] [log] [order] [monitor] [fragments] To remove this filter, you have two choices: ● Use the no seq sequence-number command if you know the filter's sequence number. ● Use the no permit tcp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source mask any host ip-address bit dscp operator port port destination mask count bytes log Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host then the IP address to specify a host IP address. Enter a flag or combination of bits: ● ack: acknowledgement field ● fin: finish (no more data from the user) ● psh: push function ● rst: reset the connection ● syn: synchronize sequence numbers ● urg: urgent field Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63. (OPTIONAL) Enter one of the following logical operand: ● eq = equal to ● neq = not equal to ● gt = greater than ● lt = less than ● range = inclusive range of ports (you must specify two ports for the port parameter) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: ● 23 = Telnet ● 20 and 21 = FTP ● 25 = SMTP ● 169 = SNMP Enter the IP address of the network or host to which the packets are sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. (OPTIONAL) Enter the keyword count to count packets the filter processes. (OPTIONAL) Enter the keyword byte to count bytes the filter processes. (OPTIONAL) Enter the keyword log to include ACL matches in the log. 248 Access Control Lists (ACL)

Section	Page
Dell EMC Networking Command-Line Reference Guide for the C9010 Series Version 9.14.2.8	3
About this Guide	44
Objectives	44
Audience	44
Conventions	44
Information Icons	45
CLI Basics	46
Accessing the Command Line	46
Multiple Configuration Users	46
Obtaining Help	47
Navigating the CLI	49
Using the Keyword no Command	49
Filtering show Commands	49
Command Modes	50
Control and Monitoring	59
asf-mode	60
banner exec	61
banner login	62
banner motd	63
cam-acl	64
cam-audit linecard	66
clear alarms	67
clear average-power	67
clear line	68
configure	69
debug cpu-traffic-stats	69
debug ftpserver	70
disable	71
do	71
enable	72
enable cpu-clock-monitor	73
enable optic-info-update interval	74
end	74
exec-timeout	75
exit	76
ftp-server enable	77
ftp-server topdir	78
ftp-server username	78
hostname	79
ip ftp password	80
ip ftp source-interface	81
ip ftp username	82
ip http source-interface	83
ip telnet server enable	83
ip telnet source-interface	84
ip tftp source-interface	85
line	86
logging coredump server	87
login concurrent-session	88
login statistics	89
ping	91
power on	93
reload	94
send	94
service timestamps	95
show alarms	96
show asf	99
show chassis	100
show command-history	101
show console lp	102
show cpu-traffic-stats	103
show cpu-interface-stats	104
show debugging	106
show environment	107
show inventory	109
show linecard	111
show login statistics	113
show memory	116
show processes cpu	117
show processes ipc	121
show processes ipc flow-control	124
show processes memory	126
show reset-reason	132
show rpm	134
show software ifm	136
show system linecard	137
show tech-support	138
show util-threshold cpu	150
show util-threshold memory	151
show version	151
telnet	154
terminal length	156
traceroute	156
undebug all	158
upload trace-log	159
util-threshold cpu	160
util-threshold memory	161
virtual-ip	162
write	163
File Management	165
boot system	165
cd	166
copy	167
delete	170
dir	171
format flash	173
mkdir	174
mount nfs	174
pwd	175
rename	175
restore factory-defaults	176
rmdir	177
show boot bmp	178
show boot system	178
show bootvar	179
show file	180
show file-systems	181
show os-version	183
show running-config	186
show startup-config	189
upgrade	190
upgrade system-image-os6	192
verify	193
802.1X	195
debug dot1x	196
dot1x auth-fail-vlan	196
dot1x auth-server	197
dot1x auth-type mab-only	198
dot1x authentication (Configuration)	199
dot1x authentication (Interface)	199
dot1x critical-vlan	200
dot1x guest-vlan	201
dot1x host-mode	202
dot1x mac-auth-bypass	203
dot1x max-eap-req	203
dot1x max-supplicants	204
dot1x port-control	205
dot1x profile	205
dot1x quiet-period	206
dot1x reauthentication	207
dot1x reauth-max	207
dot1x server-timeout	208
dot1x static-mab	209
dot1x supplicant-timeout	210
dot1x tx-period	211
mac	211
show dot1x cos-mapping interface	212
show dot1x interface	213
show dot1x profile	216
Access Control Lists (ACL)	217
Commands Common to all ACL Types	217
remark	217
show config	219
Common IP ACL Commands	220
clear counters ip access-group	220
ip access-group	221
ipv6 access-group	222
ip control-plane egress-filter	223
show ip accounting access-list	224
Standard IP ACL Commands	225
deny	225
feature acloptimized	226
ip access-list standard	227
permit	228
resequence access-list	229
resequence prefix-list ipv4	230
seq	231
show ip access-lists	233
Extended IP ACL Commands	234
deny	234
deny icmp	236
deny tcp	239
deny udp	241
ip access-list extended	243
permit	244
permit icmp	246
permit tcp	248
permit udp	250
resequence prefix-list ipv4	252
seq	253
ACL VLAN Group Commands	256
acl-vlan-group	256
cam-acl-vlan	256
description (ACL VLAN Group)	257
member vlan (ACL VLAN Group)	258
show acl-vlan-group	258
show cam-acl-vlan	259
show running config acl-vlan-group	260
Common MAC ACL Commands	261
clear counters mac access-group	261
mac control-plane egress-acl	262
mac access-group	262
show mac access-lists	263
show mac accounting access-list	265
Standard MAC ACL Commands	266
deny	266
mac access-list standard	267
permit	268
seq	270
Extended MAC ACL Commands	271
deny	271
mac access-list extended	273
permit	274
seq	276
IP Prefix List Commands	277
clear ip prefix-list	278
deny	278
ip prefix-list	279
permit	280
seq	281
show config	282
show ip prefix-list detail	282
show ip prefix-list summary	283
Route Map Commands	284
continue	284
description	285
match as-path	286
match community	287
match interface	287
match ip address	288
match ip next-hop	289
match ip route-source	290
match metric	291
match origin	292
match route-type	292
match tag	293
route-map	294
set as-path	295
set automatic-tag	296
set comm-list delete	297
set community	298
set level	299
set local-preference	300
set metric	300
set metric-type	301
set next-hop	302
set origin	303
set tag	303
set weight	304
show config	305
show route-map	306
AS-Path Commands	306
ip as-path access-list	307
show ip as-path-access-lists	307
IP Community List Commands	308
ip community-list	308
show ip community-lists	309
Bidirectional Forwarding Detection (BFD)	310
bfd all-neighbors	310
bfd disable	312
bfd enable (Configuration)	312
bfd enable (Interface)	313
bfd interval	313
bfd protocol-liveness	314
ip route bfd	315
ipv6 route bfd	316
ip ospf bfd all-neighbors	317
ipv6 ospf bfd all-neighbors	318
neighbor bfd	319
neighbor bfd disable	319
show bfd neighbors	320
vrrp bfd	322
Border Gateway Protocol	324
BGP IPv4 Commands	324
address-family	324
aggregate-address	325
bgp add-path	326
bgp always-compare-med	327
bgp asnotation	327
bgp bestpath as-path ignore	328
bgp bestpath as-path multipath-relax	329
bgp bestpath med confed	330
bgp bestpath med missing-as-best	330
bgp bestpath router-id ignore	331
bgp client-to-client reflection	331
bgp cluster-id	332
bgp confederation identifier	333
bgp confederation peers	334
bgp dampening	334
bgp default local-preference	336
bgp dmzlink-bw	336
bgp enforce-first-as	337
bgp fast-external-fallover	338
bgp four-octet-as-support	338
bgp graceful-restart	339
bgp log-neighbor-changes	340
bgp non-deterministic-med	340
bgp outbound-optimization	341
bgp recursive-bgp-next-hop	342
bgp regex-eval-optz-disable	342
bgp router-id	343
bgp soft-reconfig-backup	344
capture bgp-pdu neighbor	345
capture bgp-pdu max-buffer-size	345
clear ip bgp	346
clear ip bgp dampening	347
clear ip bgp flap-statistics	348
clear ip bgp peer-group	350
debug ip bgp	351
debug ip bgp dampening	352
debug ip bgp events	353
debug ip bgp keepalives	354
debug ip bgp notifications	355
debug ip bgp soft-reconfiguration	355
debug ip bgp updates	356
default-metric	357
deny bandwidth	358
description	358
distance bgp	359
maximum-paths	360
neighbor activate	361
neighbor add-path	361
neighbor advertisement-interval	362
neighbor advertisement-start	363
neighbor allowas-in	363
neighbor default-originate	364
neighbor description	365
neighbor distribute-list	366
neighbor dmzlink-bw	366
neighbor ebgp-multihop	367
neighbor fall-over	368
neighbor filter-list	369
neighbor local-as	369
neighbor maximum-prefix	370
neighbor next-hop-self	371
neighbor password	372
neighbor peer-group (assigning peers)	373
neighbor peer-group (creating group)	374
neighbor peer-group passive	375
neighbor remote-as	375
neighbor remove-private-as	376
neighbor route-map	377
neighbor route-reflector-client	378
neighbor send-community	379
neighbor shutdown	379
neighbor soft-reconfiguration inbound	380
neighbor subnet	381
neighbor timers	382
neighbor timers extended	383
neighbor update-source	383
neighbor weight	384
network	385
network backdoor	386
permit bandwidth	387
redistribute	387
redistribute ospf	388
router bgp	389
set extcommunity bandwidth	390
shutdown all	391
shutdown address-family-ipv4–multicast	391
shutdown address-family-ipv4–unicast	391
shutdown address-family-ipv6–unicast	392
show capture bgp-pdu neighbor	392
show config	393
show ip bgp	394
show ip bgp cluster-list	396
show ip bgp community	398
show ip bgp community-list	400
show ip bgp dampened-paths	401
show ip bgp detail	403
show ip bgp extcommunity-list	404
show ip bgp filter-list	406
show ip bgp flap-statistics	407
show ip bgp inconsistent-as	409
show ip bgp neighbors	410
show ip bgp next-hop	413
show ip bgp paths	414
show ip bgp paths as-path	416
show ip bgp paths community	417
show ip bgp peer-group	418
show ip bgp regexp	419
show ip bgp summary	421
show running-config bgp	423
timers bgp	424
timers bgp extended	424
MBGP Commands	425
debug ip bgp dampening	425
distance bgp	426
show ip bgp dampened-paths	427
BGP Extended Communities (RFC 4360)	428
deny	428
deny regex	429
description	430
ip extcommunity-list	430
match extcommunity	431
permit	431
permit regex	432
set extcommunity rt	433
set extcommunity soo	434
show ip bgp ipv4 extcommunity-list	435
show ip bgp paths extcommunity	436
show ip extcommunity-list	437
show running-config extcommunity-list	437
IPv6 BGP Commands	438
address-family	438
address family ipv6 unicast	439
aggregate-address	439
bgp always-compare-med	440
bgp bestpath as-path ignore	441
bgp bestpath med confed	441
bgp bestpath med missing-as-best	442
bgp client-to-client reflection	442
bgp cluster-id	443
bgp confederation identifier	443
bgp dampening	444
bgp default local-preference	445
bgp enforce-first-as	445
bgp fast-external-fallover	446
bgp four-octet-as-support	446
bgp graceful-restart	447
bgp log-neighbor-changes	447
bgp non-deterministic-med	448
bgp recursive-bgp-next-hop	448
bgp regex-eval-optz-disable	449
bgp router-id	450
bgp soft-reconfig-backup	450
capture bgp-pdu max-buffer-size	451
capture bgp-pdu neighbor (ipv6)	451
clear ip bgp ipv6-address	452
clear ip bgp * (asterisk)	453
clear ip bgp as-number	453
clear ip bgp ipv6 dampening	454
clear ip bgp ipv6 flap-statistics	454
clear ip bgp ipv6 unicast	455
clear ip bgp ipv6 unicast dampening	456
clear ip bgp ipv6 unicast flap-statistics	456
debug ip bgp keepalives	457
debug ip bgp ipv6 dampening	457
debug ip bgp ipv6 unicast peer-group updates	458
debug ip bgp ipv6 unicast dampening	459
debug ip bgp ipv6 unicast updates	459
debug ip bgp notifications	460
debug ip bgp updates	460
default-metric	461
description	461
distance bgp	462
ipv6 prefix-list	463
maximum-paths	463
neighbor activate	464
neighbor advertisement-interval	464
neighbor allowas-in	465
neighbor default-originate	466
neighbor description	466
neighbor distribute-list	467
neighbor ebgp-multihop	467
neighbor fall-over	468
neighbor filter-list	469
neighbor maximum-prefix	469
neighbor next-hop-self	470
neighbor peer-group (assigning peers)	471
neighbor peer-group (creating group)	472
neighbor peer-group passive	472
neighbor remote-as	473
neighbor remove-private-as	473
neighbor route-map	474
neighbor route-reflector-client	475
neighbor send-community	475
neighbor soft-reconfiguration inbound	476
neighbor subnet	477
neighbor shutdown	477
neighbor timers	478
neighbor update-source	479
neighbor weight	479
neighbor X:X:X::X password	480
network	480
network backdoor	481
redistribute	482
redistribute ospf	482
router bgp	483
show capture bgp-pdu neighbor	484
show config	484
show ip bgp next-hop	485
show ip bgp paths	485
show ip bgp paths as-path	486
show ip bgp paths community	486
show ip bgp paths extcommunity	487
show ip bgp regexp	487
show ipv6 prefix-list	488
show ip bgp ipv6 unicast	488
show ip bgp ipv6 unicast cluster-list	489
show ip bgp ipv6 unicast community	489
show ip bgp ipv6 unicast community-list	490
show ip bgp ipv6 unicast dampened-paths	490
show ip bgp ipv6 unicast detail	491
show ip bgp ipv6 unicast extcommunity-list	491
show ip bgp ipv6 unicast filter-list	492
show ip bgp ipv6 unicast flap-statistics	492
show ip bgp ipv6 unicast inconsistent-as	493
show ip bgp ipv6 unicast neighbors	493
show ip bgp ipv6 unicast peer-group	494
show ip bgp ipv6 unicast summary	495
timers bgp	495
IPv6 MBGP Commands	496
show ipv6 mbgproutes	496
Content Addressable Memory (CAM)	498
CAM Profile Commands	498
cam-acl (Configuration)	499
cam-acl-egress	501
cam-acl-egress-pe	502
cam-acl-pe	502
cam-optimization	503
cam-threshold	504
show cam-acl	504
show cam-usage	505
show cam-acl-pe	507
show cam-acl-egress-pe	508
test cam-usage	508
Unified Forwarding Table Modes	509
show hardware forwarding-table mode	510
hardware forwarding-table mode	510

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1,000
1,001
1,002
1,003
1,004
1,005
1,006
1,007
1,008
1,009
1,010
1,011
1,012
1,013
1,014
1,015
1,016
1,017
1,018
1,019
1,020
1,021
1,022
1,023
1,024
1,025
1,026
1,027
1,028
1,029
1,030
1,031
1,032
1,033
1,034
1,035
1,036
1,037
1,038
1,039
1,040
1,041
1,042
1,043
1,044
1,045
1,046
1,047
1,048
1,049
1,050
1,051
1,052
1,053
1,054
1,055
1,056
1,057
1,058
1,059
1,060
1,061
1,062
1,063
1,064
1,065
1,066
1,067
1,068
1,069
1,070
1,071
1,072
1,073
1,074
1,075
1,076
1,077
1,078
1,079
1,080
1,081
1,082
1,083
1,084
1,085
1,086
1,087
1,088
1,089
1,090
1,091
1,092
1,093
1,094
1,095
1,096
1,097
1,098
1,099
1,100
1,101
1,102
1,103
1,104
1,105
1,106
1,107
1,108
1,109
1,110
1,111
1,112
1,113
1,114
1,115
1,116
1,117
1,118
1,119
1,120
1,121
1,122
1,123
1,124
1,125
1,126
1,127
1,128
1,129
1,130
1,131
1,132
1,133
1,134
1,135
1,136
1,137
1,138
1,139
1,140
1,141
1,142
1,143
1,144
1,145
1,146
1,147
1,148
1,149
1,150
1,151
1,152
1,153
1,154
1,155
1,156
1,157
1,158
1,159
1,160
1,161
1,162
1,163
1,164
1,165
1,166
1,167
1,168
1,169
1,170
1,171
1,172
1,173
1,174
1,175
1,176
1,177
1,178
1,179
1,180
1,181
1,182
1,183
1,184
1,185
1,186
1,187
1,188
1,189
1,190
1,191
1,192
1,193
1,194
1,195
1,196
1,197
1,198
1,199
1,200
1,201
1,202
1,203
1,204
1,205
1,206
1,207
1,208
1,209
1,210
1,211
1,212
1,213
1,214
1,215
1,216
1,217
1,218
1,219
1,220
1,221
1,222
1,223
1,224
1,225
1,226
1,227
1,228
1,229
1,230
1,231
1,232
1,233
1,234
1,235
1,236
1,237
1,238
1,239
1,240
1,241
1,242
1,243
1,244
1,245
1,246
1,247
1,248
1,249
1,250
1,251
1,252
1,253
1,254
1,255
1,256
1,257
1,258
1,259
1,260
1,261
1,262
1,263
1,264
1,265
1,266
1,267
1,268
1,269
1,270
1,271
1,272
1,273
1,274
1,275
1,276
1,277
1,278
1,279
1,280
1,281
1,282
1,283
1,284
1,285
1,286
1,287
1,288
1,289
1,290
1,291
1,292
1,293
1,294
1,295
1,296
1,297
1,298
1,299
1,300
1,301
1,302
1,303
1,304
1,305
1,306
1,307
1,308
1,309
1,310
1,311
1,312
1,313
1,314
1,315
1,316
1,317
1,318
1,319
1,320
1,321
1,322
1,323
1,324
1,325
1,326
1,327
1,328
1,329
1,330
1,331
1,332
1,333
1,334
1,335
1,336
1,337
1,338
1,339
1,340
1,341
1,342
1,343
1,344
1,345
1,346
1,347
1,348
1,349
1,350
1,351
1,352
1,353
1,354
1,355
1,356
1,357
1,358
1,359
1,360
1,361
1,362
1,363
1,364
1,365
1,366
1,367
1,368
1,369
1,370
1,371
1,372
1,373
1,374
1,375
1,376
1,377
1,378
1,379
1,380
1,381
1,382
1,383
1,384
1,385
1,386
1,387
1,388
1,389
1,390
1,391
1,392
1,393
1,394
1,395
1,396
1,397
1,398
1,399
1,400
1,401
1,402
1,403
1,404
1,405
1,406
1,407
1,408
1,409
1,410
1,411
1,412
1,413
1,414
1,415
1,416
1,417
1,418
1,419
1,420
1,421
1,422
1,423
1,424
1,425
1,426
1,427
1,428
1,429
1,430
1,431
1,432
1,433
1,434
1,435
1,436
1,437
1,438
1,439
1,440
1,441
1,442
1,443
1,444
1,445
1,446
1,447
1,448
1,449
1,450
1,451
1,452
1,453
1,454
1,455
1,456
1,457
1,458
1,459
1,460
1,461
1,462
1,463
1,464
1,465
1,466
1,467
1,468
1,469
1,470
1,471
1,472
1,473
1,474
1,475
1,476
1,477
1,478
1,479
1,480
1,481
1,482
1,483
1,484
1,485
1,486
1,487
1,488
1,489
1,490
1,491
1,492
1,493
1,494
1,495
1,496
1,497
1,498
1,499
1,500
1,501
1,502
1,503
1,504
1,505
1,506
1,507
1,508
1,509
1,510
1,511
1,512
1,513
1,514
1,515
1,516
1,517
1,518
1,519
1,520
1,521
1,522
1,523
1,524
1,525
1,526
1,527
1,528
1,529
1,530
1,531
1,532
1,533
1,534
1,535
1,536
1,537
1,538
1,539
1,540
1,541
1,542
1,543
1,544
1,545
1,546
1,547
1,548
1,549
1,550
1,551
1,552
1,553
1,554
1,555
1,556
1,557
1,558
1,559
1,560
1,561
1,562
1,563
1,564
1,565
1,566
1,567
1,568
1,569
1,570
1,571
1,572
1,573
1,574
1,575
1,576
1,577
1,578
1,579
1,580
1,581
1,582
1,583
1,584
1,585
1,586
1,587
1,588
1,589
1,590
1,591
1,592
1,593
1,594
1,595
1,596
1,597
1,598
1,599
1,600
1,601
1,602
1,603
1,604
1,605
1,606
1,607
1,608
1,609
1,610
1,611
1,612
1,613
1,614
1,615
1,616
1,617
1,618
1,619
1,620
1,621
1,622
1,623
1,624
1,625
1,626
1,627
1,628
1,629
1,630
1,631
1,632
1,633
1,634
1,635
1,636
1,637
1,638
1,639
1,640
1,641
1,642
1,643
1,644
1,645
1,646
1,647
1,648
1,649
1,650
1,651
1,652
1,653
1,654
1,655
1,656
1,657
1,658
1,659
1,660
1,661
1,662
1,663
1,664
1,665
1,666
1,667
1,668
1,669
1,670
1,671
1,672
1,673
1,674
1,675
1,676
1,677
1,678
1,679
1,680
1,681
1,682
1,683
1,684
1,685
1,686
1,687
1,688
1,689
1,690
1,691
1,692
1,693
1,694
1,695
1,696
1,697
1,698
1,699
1,700
1,701
1,702
1,703
1,704
1,705
1,706
1,707
1,708
1,709
1,710
1,711
1,712
1,713
1,714
1,715
1,716
1,717
1,718
1,719
1,720
1,721
1,722
1,723
1,724
1,725
1,726
1,727
1,728
1,729
1,730
1,731
1,732
1,733
1,734
1,735
1,736
1,737
1,738
1,739
1,740
1,741
1,742
1,743
1,744
1,745
1,746
1,747
1,748
1,749
1,750
1,751
1,752
1,753
1,754
1,755
1,756
1,757
1,758
1,759
1,760
1,761
1,762
1,763
1,764
1,765
1,766
1,767
1,768
1,769
1,770
1,771
1,772
1,773
1,774
1,775
1,776
1,777
1,778
1,779
1,780
1,781
1,782
1,783
1,784
1,785
1,786
1,787
1,788
1,789
1,790
1,791
1,792
1,793
1,794
1,795
1,796
1,797
1,798
1,799
1,800
1,801
1,802
1,803
1,804
1,805
1,806
1,807
1,808

Match case Limit results 1 per page

permit tcp

To pass TCP packets meeting the filter criteria, configure a filter.

C9000 Series

Syntax

permit tcp {

source mask

| any | host

ip-address

} [

bit

] [

operator port

[

port

]] {

destination mask

| any | host

ip-address

} [

bit

] [dscp] [

operator

port

[

port

]] [count [bytes]] [log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

●

Use the

no seq

sequence-number

command if you know the filter’s sequence number.

●

Use the

no permit tcp {

source mask

| any | host

ip-address

} {

destination

mask

| any | host

ip-address

}

command.

Parameters

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified

in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword

any

to specify that all routes are subject to the filter.

host

ip-address

Enter the keyword

host

then the IP address to specify a host IP address.

bit

Enter a flag or combination of bits:

●

ack:

acknowledgement field

●

fin:

finish (no more data from the user)

●

psh:

push function

●

rst:

reset the connection

●

syn:

synchronize sequence numbers

●

urg:

urgent field

dscp

Enter the keyword

dscp

to deny a packet based on the DSCP value. The range is

from 0 to 63.

operator

(OPTIONAL) Enter one of the following logical operand:

●

= equal to

●

neq

= not equal to

●

= greater than

●

= less than

●

range

= inclusive range of ports (you must specify two ports for the port

parameter)

port port

Enter the application layer port number. Enter two port numbers if you are using

the range logical operand. The range is from 0 to 65535.

The following list includes some common TCP port numbers:

●

23 = Telnet

●

20 and 21 = FTP

●

25 = SMTP

●

169 = SNMP

destination

Enter the IP address of the network or host to which the packets are sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified

in A.B.C.D format, may be either contiguous or non-contiguous.

count

(OPTIONAL) Enter the keyword

count

to count packets the filter processes.

bytes

(OPTIONAL) Enter the keyword

byte

to count bytes the filter processes.

log

(OPTIONAL) Enter the keyword

log

to include ACL matches in the log.

248

Access Control Lists (ACL)