Zte ZXR10 5250 Series - Page 295

Chapter4ServiceConguration
CommandMode
HybridingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}tcp{<source-ipaddr><sip-mask>|any}[source-port<0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>|any}[dest-port<0-65535><dport-mask>][dscp
<0-63>][fragment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|any][<de
st-mac><dmac-mask>|any]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
tcp
ThisruleisonlyvalidforTCPpacket.Otherpacketsignorethis
rule.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskandusedforsource.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
source-port<0-65535>
TCPsourceportnumberofthetransmittedpacket
Theparametersofsource-portcanresolvethesomeknownport
numbers.Alsotheportnumberandmaskcanbedirectlyinputted.
<sport-mask>Sourceportmask.
any(rst)
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itisa32-bit
IPaddressexpressedindotteddecimalnotation.
<dip-mask>
Destinationmaskusedfordestination.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0
dest-port<0-65535>
TCPdestinationportnumberofthetransmittedpacket
Theparametersofdest-portcanresolvethesomeknownport
numbers.Alsotheportnumberandmaskcanbedirectlyinputted.
<dport-mask>Destinationportmask.
4-237
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential