Chapter2ACLConguration
<destination-wildca
rd>
DestinationIPaddresswildcardmask
any
AnysourceordestinationIPaddress
<icmp-type>
ICMPmessagetypeeld
icmp-code
<icmp-code>
ICMPmessagetype,range:0~254
precedence
<pre-value>
Priority,range:0~7
tos<tos-value>
Servicetype,range:0~15
dscp<dscp-value>DSCPvalue,range:0~63
fragment
DetermineswhethertheIPpacketwillbe
fragmented(availableforthe3900series
only)
time-range
<timerange-name>
Timerangename,notmorethan31
characters
event<event-name>
Eventlistname,notmorethan31characters
<ip-number>IPprotocolnumber
<rule>Operatortocomparethesourceordestination
port
<port>
Sourceordestinationportnumber
established
FieldidentifyingwhethertheTCPcanestablish
thelink
tcp-control<0-63>
CombinationofTCPheader
URGACKPSHRSTSYNFIN,supported
byhigh-endswitchT160Gseries
Instructions�ForICMP ,thereisanICMPmessagetypeeld<icmp-type>,
whichcanbeadecimalnumeral(0~254)oraname.
ICMPmessagetypenames:
alternate-addressechoecho-replyinformation-replyinfor-
mation-requestmask-replymask-requestparameter-prob-
lemredirectrouter-advertisementrouter-solicitationsource-
quenchtime-exceededtimestamp-replytimestamp-re-
questtracerouteunreachable
�ForTCPandUDP ,thereisanoperator<rule>tocomparethe
sourceordestinationport.Here,itis“eq”(equal)placedin
frontofthesourceordestinationport,indicatingitequalsto
thesourceordestinationport.TheTCPorUDPport<port>
canbeadecimalnumeral(1-65535)oraname.
TCPportnames:
BGP ,domain,nger ,FTP ,login,pop2,pop3,SMTP ,TELNETand
WWW
UDPportnames:
CondentialandProprietaryInformationofZTECORPORATION27