Zte ZXR10 2900E Series - Egress-Acl Extend Rule Type-Tcp

ZXR102900ESeriesCommandReference
Guidelines
TheIPrulecanmatchIPv4packetswithspeciedsourceIPaddresses,anysourceIP
address,specieddestinationIPaddresses,anydestinationIPaddress,DSCPelds,or
IPfragmentelds.
4.13.52egress-aclextendruletype-tcp
Purpose
ThiscommandsetstherulethattheextendedegressACLisusedtomatchTCPmessage.
CommandMode
ExtendedegressACLcongurationmode
Syntax
rule<1-500>{permit|deny}tcp{<source-ipaddr><sip-mask>|any}[source-port<0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>|any}[dest-port<0-65535><dport-mask>][establ
ishing|established][dscp<0-63>][fragment]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
tcp
ThisruleonlymatchesTCPmessage.Non-TCPmessageignores
thisrule.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskusedforsources.Itisa32-bitIPaddressexpressed
indotteddecimalnotation.
any(rst)
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
source-port<0-65535>
TCPsourceportnumberofthetransmittedpacket
Theparametersofsource-portcanresolvethesomeknownport
numbers.Alsotheportnumberandmaskcanbedirectlyinputted.
<sport-mask>Sourceportnumbermask
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itisa32-bit
IPaddressexpressedindotteddecimalnotation.
4-264
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential