r2621(config)#access-list 100 permit ip ? A.B.C.D Source address any Any source host host A single source host r2621(config)#access-list 100 permit ip % Incomplete command. r2621(config)#access-list 100 permit ip ? A.B.C.D Source address any Any source host host A single source host r2621(config)#access-list 100 permit ip host 1.1.1.0 ? A.B.C.D Destination address any Any destination host host A single destination host r2621(config)#access-list 100 permit ip host 1.1.1.0 any ? dscp Match packets with given dscp value fragments Check non-initial fragments log Log matches against this entry log-input Log matches against this entry, including input interface precedence Match packets with given precedence value time-range Specify a time-range tos Match packets with given TOS value <cr>
AclExtendedRule attributes lists attributes supported in AclExtendedRule.
| Display Name |
Type |
Description |
|---|---|---|
| Ack |
Boolean |
ACK tcp-flag. |
| AclRuleDescription |
String |
User description of rule. (Most devices do not implement this.) |
| Action |
String |
Action to take on packet if the rule matches. |
| Dscp |
Integer |
Diff-serve code point. Small integer value. |
| DstIpAddress |
IpAddressString |
Destination IP address (IPV4 or IPV6). |
| DstIpCIDR |
IpAddressString |
Constructed IP conglomerate used for comparisons. |
| DstIpNetMask |
String |
Destination IP Net Mask. (These are true Net Masks, not Wildcard entries). |
| DstMac |
String |
Destination MAC for layer 2 packets. |
| DstMacMACADDR |
String |
Constructed destination MAC for comparisons. |
| DstPortList |
ListObject |
Destination port low range or single port value. |
| DynamicName |
String |
Name of dynamic ACL. |
| EspSpi |
String |
Value of IPSEC Security Parameter Index |
| EthernetType |
Integer |
Ethernet type code. |
| Fin |
Boolean |
Fin tcp-flag. |
| ForwardingClass |
String |
Current forwarding class of packet. |
| FragOffsetRange |
String |
Frag offset range. |
| IcmpCode |
Integer |
ICMP code for ICMP packets. |
| IcmpMessage |
String |
ICMP message for ICMP packets. |
| IcmpType |
Integer |
Type code for ICMP packets. |
| IgmpTypeList |
ListObject |
IGMP type code for IGMP packets. |
| IpOptionsList |
ListObject |
List of IP options specified by this rule. |
| IpPrecedence |
Integer |
IP precedence value. |
| IpProtocolList |
ListObject |
Ip protocol list or range |
| IsEstablished |
Boolean |
Boolean indication a TCP connection is established. |
| IsFragment |
Boolean |
Boolean indicating packet is a fragment. |
| LogInput |
Boolean |
Enable the logging of input interface |
| LogPackets |
Boolean |
Boolean indicating packets should be logged. |
| MacPrecedence |
Integer |
MAC precedence value. |
| MatchCount |
Long |
The device rule counter for this rule. |
| PacketLength |
Integer |
Packet length of IP packet. |
| Psh |
Boolean |
Psh tcp-flag. |
| RedirectPort |
Integer |
Port number packets matching packets should be redirected to |
| RejectCode |
Integer |
ICMP reject code that should be sent when packets match rule. |
| Rst |
Boolean |
Reset tcp-flag |
| RuleNumber |
Integer |
Rule number with the ACL. |
| SetForwardingClass |
String |
Set matching packet’s forwarding class to specified field. |
| SetLossPriority |
String |
Set matching packets loss priority to specified field. |
| SetRateLimiter |
String |
Set matching packets rate limiter to specified field. |
| SrcIpAddress |
IpAddressString |
Source IP address in rule (IPV4 or IPV6). |
| SrcIpCIDR |
IpAddressString |
Constructed IP/mask conglomerate for address comparisons. |
| SrcIpNetMask |
String |
Source IP Net Mask. (These are true Net Masks, not Wildcard entries). |
| SrcMac |
String |
Source MAC for layer 2 packets. |
| SrcMacMACADDR |
String |
Constructed source MAC operator for comparisons. |
| SrcPortList |
ListObject |
List of source ports or port ranges |
| Syn |
Boolean |
Syn tcp-flag. |
| TimeRange |
String |
Name of time range association. (Cisco) |
| TypeOfServiceList |
ListObject |
List of IP type of service values. |
| Urg |
Boolean |
Urg tcp-flag. |
