Dell S3100 Command Line Reference Guide for the Series 9.110.0 - Page 1222

Version 9.4(0.0) 8.4.2.1 8.4.2.0 6.5.3.0 Description Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series. Introduced on the E-Series. permit Configure a permit rule. A permit rule excludes the matching packets from PBR classification and routes them using conventional routing. Syntax Parameters permit {ip-protocol-number | protocol-type} {source mask | any | host ipaddress} {destination mask | any | host ip-address} [bit] [operators] To remove the rule, use one of the following: • If you know the filter sequence number, use the no seq sequence-number syntax command. • You can also use the no permit {ip-protocol-number | protocol-type} {source mask | any | host ip-address} {destination mask | any | host ip-address} [bit] [operators] command. ip-protocol-number Enter a number from 0 to 255 for the protocol identified in the IP protocol header. protocol-type Enter one of the following keywords as the protocol type: • icmp for internet control message protocol • ip for any internet protocol • tcp for transmission control protocol • udp for user datagram protocol source mask any host ip-address destination bit Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x). Enter the keyword any to specify that all traffic is subject to the filter. Enter the keyword host then he IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. (OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags: • ack = acknowledgement • fin = finish (no more data from the user) • psh = push function • rst = reset the connection • syn = synchronize sequence number • urg = urgent field 1222 Policy-based Routing (PBR)