
12 - 10 WiNG CLI Reference Guide
Parameters
permit ip [<source-IP/Mask>|
any|host <IP>]
[<dest-IP/Mask>|any|host
<IP>] {log} {rule-precedence
<1-5000>} {mark [8021p <0-
7>|dscp<0-63> rule-
precedence <1-5000> {rule-
description} <WORD>}
Use with a permit command to allow IP packets
• permit – Sets the action type on an ACL
• IP – Specifies an IP (to match to a protocol)
• <source-IP/Mask>|any|host <IP> – The keyword <source-IP> is the
source IP address of the network or host in dotted decimal format
• any – any is an abbreviation for a source IP of 0.0.0.0 and
source-mask bits equal to 0
•host – host is an abbreviation for the exact source <IP> (A.B.C.D
format) and source-mask bits equal to 32
• <dest-IP/Mask>|any|host <IP> – Defines the destination host IP
address or destination network address
• log – Generates log messages when a packet coming from an
interface matches an ACL entry. Log messages are generated only for
router ACLs
• rule-precedence <1-5000> – Defines an integer value between
1-5000. This value sets the rule precedence in the ACL
• mark – Use with mark command to mark a packet
• 8012p <0-7> – Sets the 802.1p VLAN user priority value to
<vlan-priority-value> (0-7)
• dscp <0-63> – Sets the Differentiated Services Code Point code-point
value to <dscp-codepoint-value> (0-63)
permit icmp [<source-IP/
Mask>|any|host <ip>]
[<dest-IP/Mask>|any|
host <IP>] {<ICMP-type>
{<ICMP-code>}} {log}
{rule-precedence
<1-5000>]} {mark [8021p
<0-7>|dscp<0-63>
rule-precedence <1-5000>
{rule-description} <WORD>}
Use with the permit command to allow ICMP packets
• deny – Permits ICMP packets
• icmp – Specifies ICMP as the protocol
• [<source-IP>|any|host <IP>] – The <source-IP> is the source IP address
of the network or host (in dotted decimal format).
• any – any is an abbreviation for a source IP of 0.0.0.0 and
source-mask bits equal to 0
• host – host is an abbreviation for exact source (A.B.C.D) and
source-mask bits equal to 32
Comentarios a estos manuales