set security acl 383
(For a complete list of TCP and UDP port numbers, see
www.iana.org/assignments/port-numbers.)
■ destination-ip-addr mask — IP address and wildcard mask of the
network or host to which the packet is being sent. Specify both
address and mask in dotted decimal notation. For more information,
see “Wildcard Masks” on page 24.
■ type icmp-type — Filters ICMP messages by type. Specify a value
from 0 through 255. (For a list of ICMP message type and code
numbers, see www.iana.org/assignments/icmp-parameters.)
■ code icmp-code — For ICMP messages filtered by type, additionally
filters ICMP messages by code. Specify a value from 0 through 255.
(For a list of ICMP message type and code numbers, see
www.iana.org/assignments/icmp-parameters.)
■ precedence precedence — Filters packets by precedence level.
Specify a value from 0 through 7:
■ 0 — routine precedence
■ 1 — priority precedence
■ 2 — immediate precedence
■ 3 — flash precedence
■ 4 — flash override precedence
■ 5 — critical precedence
■ 6 — internetwork control precedence
■ 7 — network control precedence
■ tos tos — Filters packets by type of service (TOS) level. Specify one of
the following values, or any sum of these values up to 15. For
example, a tos value of 9 filters packets with the TOS levels minimum
delay (8) and minimum monetary cost (1).
■ 8 — minimum delay
■ 4 — maximum throughput
■ 2 — maximum reliability
■ 1 — minimum monetary cost
■ 0 — normal
■ established — For TCP packets only, applies the ACE only to
established TCP sessions and not to new TCP sessions.
To Next Page
Loading...
