Home > Motorola > Wireless > Motorola Wing 5 Manual

Motorola Wing 5 Manual

Here you can view all the pages of manual Motorola Wing 5 Manual. The Motorola manuals for Wireless are available online for free. You can easily download all the documents as PDF.

Overview View all the pages Comments

Page 761

ACCESS-LIST 12 - 7
[eq [|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|ntp|pop3|
smtp|ssh|telnet|tftp|www]|range  ] 
[log rule-precedence |rule-precedence ] 
{rule-description }
tcp Configures the ACL for TCP packets
udp Configures the ACL for UDP packets
 Sets the IP address and mask as the source to deny access
any Identifies all devices as the source to deny access
host  Identifies a specific host as the source to deny access
  – Specify the host IP address.
eq  Identifies a specific source port
  –...

Page 762

12 - 8 WiNG CLI Reference Guide
Usage Guidelines
Use this command to deny traffic between networks/hosts based on the protocol type selected in the access list 
configuration. The following protocols are supported:



 udp
 proto
The last ACE in the access list is an implicit deny statement.
Whenever the interface receives the packet, its content is checked against the ACEs in the ACL. It is allowed/denied based 
on the ACL configuration.
 Filtering TCP/UDP allows the user to specify port numbers as...

Page 763

ACCESS-LIST 12 - 9
12.1.2 no
ip-access-list
Negates a command or sets its default
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
no [deny|permit]
no [deny|permit] [icmp|ip|prpto|tcp|udp]
no [deny|permit] icmp [|any|host ] [|any|
host ]   (log,mark [8021p |dscp ],
rule-precedence ) {rule-description }
no [deny|permit] ip [|any|host ] [|any|
host ] (log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }...

Page 764

12 - 10 WiNG CLI Reference Guide
• no [deny|permit] ip [|any|host ] [|any|
host ] (log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }
any Identifies all devices as the source to permit/deny access
host  Identifies a specific host as the source to permit/deny access
  – Specify the host IP address.
 Sets the IP address and mask as the destination to permit/deny access
any Identifies all devices as the destination to permit/deny access
host  Identifies a specific host as the destination to...

Page 765

ACCESS-LIST 12 - 11
• no [deny|permit] proto [||eigrp|gre|igmp|igp|
ospf|vrrp] [|any|host ] [|any|
host ] (log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }
log Logs all permit/deny events
mark [8021p |dscp  Marks packets that match the ACL rule
 8021p  – Modifies 802.1p VLAN user priority from 0 - 7
 dscp  – Modifies DSCP TOS bits in the IP header from 0 - 63
rule-precedence  Sets the rule precedence. Rules are checked in the order of their rule precedence
  – Specify the rule precedence...

Page 766

12 - 12 WiNG CLI Reference Guide
• no [deny|permit] [tcp|udp] [|any|host ] [eq |
range  ] [|any|host ] 
[eq [|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|ntp|pop3|
smtp|ssh|telnet|tftp|www]|range  ] 
[log rule-precedence |rule-precedence ] 
{rule-description }
mark [8021p |dscp  Marks packets that match the ACL rule
 8021p  – Modifies 802.1p VLAN user priority from 0 - 7
 dscp  – Modifies DSCP TOS bits in the IP header from 0 - 63
rule-precedence  Sets the rule precedence. Rules are checked in the order...

Page 767

ACCESS-LIST 12 - 13
Usage Guidelines
Removes an access list control entry. Provide the rule-precedence value when using the no command.
Examples
rfs7000-37FABE(config-ip-acl-test)#show context
ip access-list test
 deny proto vrrp any any log rule-precedence 600
 deny proto ospf any any log rule-precedence 650
 permit ip 172.16.10.0/24 any log rule-precedence 750
 permit tcp 172.16.10.0/24 any log rule-precedence 800
rfs7000-37FABE(config-ip-acl-test)#no permit ip 172.16.10.0/24 any log rule-
precedence...

Page 768

12 - 14 WiNG CLI Reference Guide
Related Commands
denyCreates a deny ACL
permitCreates a permit ACL

Page 769

ACCESS-LIST 12 - 15
12.1.3 permit
ip-access-list
Permits specific packets
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
permit [icmp|ip|proto|tcp|udp
permit icmp [|any|host ] [|any|host ] 
  (log,mark [8021p |dscp ],
rule-precedence ) {rule-description }
permit ip [|any|host ] [|any|host ] 
(log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }
permit proto [||eigrp|gre|igmp|igp|ospf|vrrp] 
[|any|host...

Page 770

12 - 16 WiNG CLI Reference Guide
Parameters
• permit icmp [|any|host ] [|any|
host ]   (log,mark [8021p |dscp ],
rule-precedence ) {rule-description }
• permit ip [|any|host ] [|any|host ] 
(log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }
icmp Configures an ACL for ICMP packets
 Sets the IP address and mask as the source to permit access
any Permits traffic from all potential sources
host  Permits traffic from a specific host
  – Specify the host IP address.
 Sets the IP address and mask...

Start reading Motorola Wing 5 Manual
All Motorola manuals