Zte ZXR10 5250 Series - Page 313

Chapter4ServiceConguration
ParameterDescription
ParameterDescription
<1-16>Globalrulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
<1-28>
Bindstheglobalruletoaport.Differentdeviceshavedifferent
portnumberranges.Inthesyntax,the5250-28TCdeviceisused
asanexample.
any(rst)Bindstheglobalruletoallports.
udp
ThisruleonlymatchesUDPpacket.Thenon-UDPpacketignores
thisrule.
<source-ipaddr>
ThisruleonlymatchesIPpacket.Thenon-IPpacketignoresthis
rule.
<sip-mask>
Sourcemaskusedforsources.Itisa32-bitIPaddressexpressed
indotteddecimalnotation.
source-port<0-65535>
UDPsourceportnumberofthetransmittedpacket
Thesource-portparameterresolvesomeknownportnumber.
Alsotheportnumberandmaskcanbeentered.
<sport-mask>Sourceportmask.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itisa32-bit
IPaddressexpressedindotteddecimalnotation.
<dip-mask>
Destinationmaskusedfordestination.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
any(third)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0.
dest-port<0-65535>
UDPdestinationportnumberofthetransmittedpacket.
Thedest-portparameterresolvesomeknownportnumber.Also
theportnumberandmaskcanbeentered.
<dport-mask>Destinationportmask.
dscp<0-63>
ThisruleisonlyvalidforthemessagewiththespeciedDSCP
value.Ignorethisruleforothermessages.TherangeofDSCP
valueis0to63.
fragment
ThisruleisonlyvalidforthemessagewiththespeciedDSCP
value.Ignorethisruleforothermessages.TherangeofDSCP
valueis0to63.
4-255
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential