HP Mellanox SX1018 Mellanox MLNX-OS®Command Reference Guide for SX101 - Page 393

Rev 1.6.9 deny/permit (IPv4 TCP/UDP ACL rule) [seq-number ] {permit | deny} {tcp | udp} { [mask ] | [any]} { [mask ]| [any]} [eq-source ] [eq-destination ] [action ] no Creates a rule for IPv4 UDP/TCP ACL. The no form of the command deletes a rule from the ACL. Syntax Description sequence-number Optional parameter to set a specific sequence number for the rule. The range is:1-500. deny | permit Determines the type of the rule, deny or permit action. tcp | udp UDP or TCP rule transport type. {any | [mask ]} Sets source IP and optionally sets a mask for that IP address. The "any" option will cause the rule not to check the source IP. {any | [mask ]} Sets destination IP and optionally sets a mask for that MAC. The "any" option will cause the rule not to check the destination MAC. [eq-source ] TCP/UDP source port number. Range is 0-65535. [eq-destination ] TCP/UDP destination port number. Range is 0-65535. Default No rule is added by default to access control list. Default sequence number is in multiple of 10. Configuration Mode Config IPv4 ACL History 3.1.1400 Role admin Example switch (config ipv4 access-list my-list) # seq-number 10 deny tcp any any eq-source 1200 switch (config ipv4 access-list my-list) # Related Commands ipv4/mac access-list ipv4/mac port access-group Note Mellanox Technologies 393 Mellanox® Technologies Confidential