ACL Configuration Command List 287
View
Corresponding ACL View
Parameter
rule-id
: Specifies the subitems of an ACL, ranging from 0 to 65534.
permit: Permits packets that meet the requirements.
deny: Denies packets that meet the requirements.
time-range
name
: Name of a time range, during which a rule takes effect.
The following parameters are various property parameters carried by packets. The
ACL sets rules according to this parameter.
Parameters specific to basic ACLs:
source {
source-addr wildcard
| any }:
source-addr wildcard
represents
the source IP address and the wildcard digit represented in dotted decimal
notation.
any represents all source addresses.
fragment: Means this rule is only effective fragment packets and is ignored for
non-fragment packets.
logging
Parameters specific to advanced ACLs:
protocol: Specifies the protocol type which is represented by a name or a
number. When it is a name, this parameter can be adopted like: icmp, igmp, tcp,
udp, ip, gre, ospf, ipinip, etc. If the adopted value is IP, that means all the Internet
Protocols. When it is a number: it ranges from 1 to 225.
source {
source-addr wildcard
| any }:
source-addr wildcard
means the
source IP address and the wildcard digit represented in dotted decimal notation.
any means all source addresses.
destination {
dest-addr wildcard
| any }:
dest-addr wildcard
means the
destination IP address and the wildcard digit represented in dotted decimal
notation.
any means all destination addresses.
source-port
operator port1 [port2]
: Source port number of TCP or UDP used
by the packet.
operator
is port operator, including eq (equal), gt (greater than), lt
(less than),neq (not-equal), range (within this range). Note that this parameter is
only available when the parameter protocol is TCP or UDP. port1 [port2]: Source
port number of TCP or UDP used by the packet, notated by a character or a
number which ranges from 0 to 65535 inclusive. For the value of the character,
please refer to mnemonic symbol table. The two parameters port1 and port2
appear at the same time only when the operator is “range”, but other operators
need “port1” only.
destination-port
operator port1 [port2
]: Destination port number of TCP or
UDP used by packets. For detailed description, please refer to
source-port
operator port1 [port2]
.
To Next Page
Loading...
