Cisco 300 Series Cli Manual page 775

Small business 300 series managed switches command line interface guide release 1.3

Table of Contents

ACL Commands

78-21075-01 Command Line Interface Reference Guide

(49), talk (517), telnet (23), time (37), uucp (117), whois (43), www (80). For

UDP enter a number or one of the following values: biff (512), bootpc (68),

bootps (67), discard (9), dnsix (90), domain (53), echo (7), mobile-ip (434),

nameserver (42), netbios-dgm (138), netbios-ns (137), non500-isakmp

(4500), ntp (123), rip (520), snmp 161), snmptrap (162), sunrpc (111), syslog

(514), tacacs-ds (49), talk (517), tftp (69), time (37), who (513), xdmcp (177).

(Range: 0–65535)

source-port—Specifies the UDP/TCP source port. Predefined port names

are defined in the destination-port parameter. (Range: 0–65535)

list-of-flags

set it is prefixed by "+".If a flag should be unset it is prefixed by "-". Available

options are +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and

-fin. The flags are concatenated to a one string. For example: +fin-ack.

time-range-name—Name of the time range that applies to this permit

statement. (Range: 1–32)

disable-port—The Ethernet interface is disabled if the condition is matched.

log-input—Specifies sending an informational syslog message about the

packet that matches the entry. Because forwarding is done in hardware and

logging is done in software, if a large number of packets match a deny ACE

containing a log-input keyword, the software might not be able to match the

hardware processing rate, and not all packets will be logged.

Default Configuration

No IPv4 access list is defined.

Command Mode

IP Access-list Configuration mode

User Guidelines

The number of TCP/UDP ranges that can be defined in ACLs is limited. If a range of

ports is used for a source port in ACE it is not counted again if it is also used for

source port in another ACE. If a range of ports is used for destination port in ACE it

is not counted again if it is also used for destination port in another ACE.

If a range of ports is used for source port, it is counted again if it is also used for

destination port.

—List of TCP flags that should occur. If a flag should be