UMN:CLI
User Manual
V8102
256
7.18.9.3
Access List ZeBos for UDP
To create an access-list (ACL) to filter packets specific to the UDP protocol, use the fol-
lowing command.
Command
Mode
Description
access-list zebos WORD
{
deny
| permit
}
udp
{
SOUR_ADDR
|
SOUR_ADDR_RANGE
|
any
}
{
DES_ADDR
|
DES_ADDR_RANGE
|
any
}
[{
eq
|
lt
|
gt
|
ne
} <0-65535> |
range
<0-65535> <0-65535>]
Global
Specifies a deny or permit statement of the Zebos ex-
tanded ACL to filter packets specific to the UDP proto-
col.
WORD: access-list name
deny: specifies route to deny.
permit: Specified route to permit.
SOUR_ADDR:
source
IP
address
to
match
(A.B.C.D/M)
SOUR_ADDR_RANGE: source IP address range to
match (A.B.C.D A.B.C.D)
DES_ADDR: destication IP address to match
(A.B.C.D/M)
DES_ADDR_RANGE: destination IP address range to
match (A.B.C.D A.B.C.D)
eq: Specifies a destination port as equal to a given
value. (0-65535: actual equal value)
lt: Specifies a destination port as less than a given
value. (0-65535: actual less than value)
gt: Specifies a destination port as greater than a given
value. (0-65535: actual greater than value)
ne: Specifies a destination port as not equal to a given
value. (0-65535: Not equal than value)
label: Identifies an application. (1-65535: actual label
value)
precedence: Identifies a packet filter precedence level.
tos: Type of service (ToS) value to filter packets.
pkt-size: Identifies packet size.
gt: packet size less than or greater than specified val-
ue.
lt: packet size less than or greater than specified value.
(0-65535: packet size)
fragments: An ACL applies to the non-initial fragment of
packet.
log: logs the results.
interface: the name of the input or output interface.
access-list zebos WORD
{
deny
| permit
}
udp
{
SOUR_ADDR
|
SOUR_ADDR_RANGE
|
any
}
{
DES_ADDR
|
DES_ADDR_RANGE
|
any
}
[{
eq
|
lt
|
gt
|
ne
} <0-65535> |
range
<0-65535> <0-65535>] {
label
<1-
65535> |
precedence
<0-7> |
tos
{<0-255> |
range
<0-255> <0-
255>} |
pkt-size
{
lt
|
gt
} <0-
65535> |
range
<0-65535> <0-
65535> |
fragments
|
log
|
inter-
face
{
in
|
out
} [{
tengigabitether-
net
IFPORT
|
gpon
IFPORT
|
channelgroup
IFPORT
|
vlan
VLANID
}]
no access-list zebos WORD
{
deny
|
permit
}
udp
{
SOUR_ADDR
|
SOUR_ADDR_RANGE
|
any
}
{
DES_ADDR
|
DES_ADDR_RANGE
|
any
}
[{
eq
|
lt
|
gt
|
ne
} <0-65535> |
range
<0-65535> <0-65535>] {
label
<1-
65535> |
precedence
<0-7> |
tos
Deletes the configured ZeBos extanded ACL entry.
