Netgear XCM8806 Chassis Hardware Installation Guide - Page 500

NETGEAR 8800 Chassis Switch CLI Manual protocol icmp; icmp-type echo-request; } then { deny; } } The following command creates a dynamic ACL that accepts all the UDP packets from the 10.203.134.0/24 subnet that are destined for the host 140.158.18.16, with source port 190 and a destination port in the range of 1200 to 1250: create access-list udpacl "source-address 10.203.134.0/24;destination-address 140.158.18.16/32;protocol udp;source-port 190;destination-port 1200 - 1250;" "permit" The previous example creates a dynamic ACL entry named udpacl that is equivalent to the following ACL policy file entry: entry udpacl { if { source-address 10.203.134.0/24; destination-address 140.158.18.16/32; protocol udp; source-port 190; destination-port 1200 - 1250; } then { permit; } } create access-list zone create access-list zone zone-priority Description Creates a dynamic ACL zone, and sets the priority of the zone. Syntax Description name zone-priority Specifies the dynamic ACL zone name. The name can be from 1-32 characters long. Specifies priority of the zone. The range is from 1 (highest priority) to 4294967295 (lowest priority). Default The denial of service, system, and security zones are configured by default, and cannot be deleted. Usage Guidelines This command creates a dynamic ACL zone. You can configure the priority of the zone in relation to the default zones or to other configured zones. 500 | Chapter 13. ACL Commands