Command Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 1 ACL Configuration Commands
1-31
Table 1-10 TCP/UDP-specific match criteria for advanced IPv6 ACL rules
Parameters Function Description
source-port
operator port1
[ port2 ]
Defines the
source port in
the UDP/TCP
packet.
destination-port
operator port1
[ port2 ]
Defines the
destination
port in the
UDP/TCP
packet.
The operator argument can be lt (lower than),
gt (greater than), eq (equal to), or range
(inclusive range).
The port1 and port2 arguments each specify a
TCP or UDP port, represented by a number in
the range 0 to 65535. TCP port number can
be represented in words as follows:
chargen (19), bgp (179), cmd (514),
daytime (13), discard (9), domain (53),
echo (7), exec (512), finger (79), ftp (21),
ftp-data (20), gopher (70), hostname (101),
irc (194), klogin (543), kshell (544), login
(513), lpd (515), nntp (119), pop2 (109),
pop3 (110), smtp (25), sunrpc (111), tacacs
(49), talk (517), telnet (23), time (37), uucp
(540), whois (43), or www (80).
UDP port number can be represented in
words as follows: biff (512), bootpc (68),
bootps (67), discard (9), dns (53), dnsix
(90), echo (7), mobilip-ag (434), mobilip-mn
(435), nameserver (42), netbios-dgm (138),
netbios-ns (137), netbios-ssn (139), ntp
(123), rip (520), snmp (161), snmptrap
(162), sunrpc (111), syslog (514), tacacs-ds
(65), talk (517), tftp (69), time (37), who
(513), xdmcp (177).
With the range operator, the value of port2
does not need to be greater than that of port1
because the switch can automatically judge
the value range. If the two values are the
same, the switch will convert the operator
range to eq.
Note that if you specify a combination of lt 1 or
gt 65534, the switch will convert it to eq 0 or
eq 65535.
If the protocol argument is set to ICMPv6, you may define the parameters in the
following table.