Avaya X330W2-DS1 Manual Do Utilizador

Página de 176
Chapter 7
X330WAN CLI Commands
102
Avaya X330W-2DS1 User’s Guide
out
ip access-list
Use the ip access-list command to create a specific policy rule. This 
command defines a policy rule. The access list contains several of these rules. Each 
rule pertains to the source IP address, the destination IP address, the protocol, the 
protocol ports (tcp/udp if relevant), and to the ACK bit (in TCP protocol). To delete 
a specific rule, use the no form of this command.
The syntax for this command for the X330WAN is:
[no] ip access-list 
<policy-list-number> <access-list-index>     
                   <action> <protocol> {<source-ip> 
                 <source-wildcard>|any|host 
                        <source-ip>} [<operator> <port> [<port]]        
                   {<destination-ip> <destination-
                    wildcard>|any|host
                   <destination-ip>}[<operator> <port>
                   [<port>]][established] [precedence] 
access-list-number
An integer (100..149)
policy-list-number
An integer (100..149)
access-list-index
An integer (1...9999)
command
permit|deny|deny-and-notify|fwd0-7
action
permit|deny|deny-and-notify|fwd0-7| 
composite op name
protocol
ip|tcp|udp|integer (1..255)
source-ip
IP network
source-wildcard 
IP network wildcard
operator
eq|lt|gt|range
port An 
integer 
(1..65535)
destination-ip IP 
network
destination-wildcard
IP network wildcard
precedence
mandatory|optional