permit tcpTo pass TCP packets meeting the filter criteria, configure a filter.S4810Syntax permit tcp {source mask | any | host ip-address} [bit][operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte] |log] [order] [monitor] [fragments]To remove this filter, you have two choices:• Use the no seq sequence-number command if you know the filter’ssequence number.• Use the no permit tcp {source mask | any | host ip-address}{destination mask | any | host ip-address} command.Parameters source Enter the IP address of the network or host from which thepackets were sent.mask Enter a network mask in /prefix format (/x) or A.B.C.D. Themask, when specified in A.B.C.D format, may be eithercontiguous or non-contiguous.any Enter the keyword any to specify that all routes are subjectto the filter.host ip-address Enter the keyword host then the IP address to specify a hostIP address.bit Enter a flag or combination of bits:• ack: acknowledgement field• fin: finish (no more data from the user)• psh: push function• rst: reset the connection• syn: synchronize sequence numbers• urg: urgent fielddscp Enter the keyword dscp to deny a packet based on theDSCP value. The range is from 0 to 63.operator (OPTIONAL) Enter one of the following logical operand:• eq = equal to• neq = not equal to• gt = greater than• lt = less than• range = inclusive range of ports (you must specify twoports for the port parameter)Access Control Lists (ACL) 235
