8
ACCESS-LIST part
level II
a d d < D e n y | P e r m i t | C o u n t > < i p / m a s k | A n y >
Add new access control rule
d e l e t e [ 1 ~ 1 | A l l ]
Delete access control rule
m o d i f y < 1 ~ 1 > < D e n y | P e r m i t | C o u n t > < i p / m a s k | A n y >
Modify access control rule properties
r e s e t _ c o u n t e r [ 1 ~ 1 ]
Reset access control rule counter
d e f a u l t _ a c t i o n < D e n y | P e r m i t >
Access-list default action
s t a n d a r d < 1 ~ 4 >
p o l i c y < 1 ~ 1 > < 1 ~ 6 5 5 3 5 >
Assign policy number to access control rule
a d d < 1 ~ 6 5 5 3 4 >
< D e n y | P e r m i t |
C o u n t >
< T C P | U D P >
f r o m
< i p / m a s k |
A n y >
< p o r t _ s t r
| A n y >
t o
< i p / m a s k |
A n y >
< p o r t _ s t r
| A n y >
< C R >
Access control rule
< C R >
Access control rule
a d d < 1 ~ 6 5 5 3 4 >
< D e n y | P e r m i t |
C o u n t >
< I C M P >
f r o m
< i p / m a s k |
A n y >
t o
< i p / m a s k |
A n y >
t y p e _ c o d e
< 0 ~ 1 8 | D o n ' t C a r e >
< 0 ~ 1 5 | D o n ' t C a r e >
ICMP type, code
a d d < 1 ~ 6 5 5 3 4 >
< D e n y | P e r m i t |
C o u n t >
< I P >
f r o m
< i p / m a s k |
A n y >
t o
< i p / m a s k |
A n y >
< C R >
Access control rule
d e l e t e [ 1 ~ 2 5 0 | A l l ]
Delete access control rule
m o d i f y < 1 ~ 2 5 0 >
< D e n y | P e r m i t |
C o u n t >
< T C P | U D P >
f r o m
< i p / m a s k |
A n y >
< p o r t _ s t r
| A n y >
t o
< i p / m a s k |
A n y >
< p o r t _ s t r
| A n y >
< C R >
Modify access control rule
< C R >
Modify access control rule
m o d i f y < 1 ~ 2 5 0 >
< D e n y | P e r m i t |
C o u n t >
< I C M P >
f r o m
< i p / m a s k |
A n y >
t o
< i p / m a s k |
A n y >
t y p e _ c o d e
< 0 ~ 1 8 | D o n ' t C a r e >
< 0 ~ 1 5 | D o n ' t C a r e >
ICMP type, code
m o d i f y < 1 ~ 2 5 0 >
< D e n y | P e r m i t |
C o u n t >
< I P >
f r o m
< i p / m a s k |
A n y >
t o
< i p / m a s k |
A n y >
< C R >
Modify access control rule
r e s e t _ c o u n t e r [ 1 ~ 2 5 0 ]
Reset access control rule counter
d e f a u l t _ a c t i o n < D e n y | P e r m i t >
Access-list default action
e x t e n d e d < 1 ~ 4 >
p o l i c y < 1 ~ 2 5 0 > < 1 ~ 6 5 5 3 5 >
Assign policy number to access control rule
a d d < D e n y | P e r m i t > < h e x >
Add new device-filter rule
d e l e t e [ 1 ~ 3 2 | A l l ]
Delete device-filter rule
m o d i f y < 1 ~ 3 2 > < D e n y | P e r m i t > < h e x >
Modify device-filter rule properties
a c c e s s - l i s t
d e v i c e - f i l t e r
< 1 ~ 4 >
d e f a u l t _ a c t i o n < D e n y | P e r m i t >
Device-filter default action