switch7ea38b(config-ip-al)#permit tcp any any any any
  ace-priority         The priority of the ace
  dscp                 Configure DSCP filtering.
  precedence           Configure IP-PRECEDENCE filtering.
  match-all            List of TCP flags that should occur. If a flag should
                       be set it is prefixed by "+".If a flag should be unset
                       it is prefixed by "-". Available options are +urg,
                       +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst,
                       -syn and -fin.To define more than 1 flag - enter
                       additional flags one after another without a space
                       (example +syn-ack).
  time-range           Specify the time-range that applies to this permit
                       statement.
  log-input            Specifies sending an informational syslog
                       message about the packet that matches the entry.
                       Because forwarding/dropping is done in hardware
                       and logging is done in software,
                       if a large number of packets match an ACE containing a
                       log-input keyword,
                       the software might not be able to match the hardware
                       processing rate,
                       and some packets might not be logged.