access-list Command Parameters

access-list Command Parameters
Parameter Description
acl-name Specifies the access list name or number.
permit Encrypts the packet.
deny Does not encrypt the packet.
protocol Specifies the protocol by name or IP protocol number. Protocols
include icmp, tcp, udp, and ip. (ip is the keyword for any.)
src_addr, dest-addr Specifies the IP address of the network or host for the source and
destination. The term any is the wildcard for 0.0.0.0 0.0.0.0. It is
also possible to use the word host to indicate a 32-bit mask.
src_mask, dest-mask Specifies the subnet masks of the source or destination network.
operator An optional field. It includes the following options:
lt = Less than
gt = Greater than
eq = Equal to
neq = Not equal to
range = Inclusive range
port Specifies the TCP or UDP port used for the IP service.
NOTE The configuration examples in this chapter build on each other (they include the
previous portion). The specific items that are being addressed as part of the current
configuration are highlighted.