Zte ZXR10 2900E Series - Egress-Acl Extend Rule Type-Udp

Chapter4ServiceConguration
ParameterDescription
<dip-mask>
Destinationmaskusedfordestination.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0
dest-port<0-65535>
TCPdestinationportnumberofthetransmittedpacket
Theparametersofdest-portcanresolvethesomeknownport
numbers.Alsotheportnumberandmaskcanbedirectlyinputted.
<dport-mask>Destinationportnumbermask
establishing
Thisruleisonlyvalidforthemessagethatactivelyestablishes
TCPconnection.Itmatchesagack=0,syn=1.Ignorethisrule
forothermessages.
established
Thisruleisonlyvalidforthemessagethatpassivelyestablishes
TCPconnection.Itmatchesagack=1,syn=1.Ignorethisrule
forothermessages.
dscp<0-63>
ThisruleisonlyvalidforthemessagewiththespeciedDSCP
value.Ignorethisruleforothermessages.TherangeofDSCP
is0to63.
fragment
Thisruleisonlyvalidforthefragmentmessage.Non–fragment
messagesignorethisrule.
Guidelines
TheTCPrulecanmatchTCPpacketswithspeciedsourceIPaddresses,anysource
IPaddress,specieddestinationIPaddresses,anydestinationIPaddress,TCPsource
portnumbers,TCPdestinationportnumbers,activeTCPlinks,passiveTCPlinks,DSCP
elds,orIPfragmentelds.
4.13.53egress-aclextendruletype-udp
Purpose
ThiscommandsetstherulethattheextendedingressACLisusedtomatchUDPmessage.
CommandMode
ExtendedegressACLcongurationmode
Syntax
rule<1-500>{permit|deny}udp{<source-ipaddr><sip-mask>|any}[source-port<0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>|any}[dest-port<0-65535><dport-mask>][dscp
<0-63>][fragment]
4-265
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential