R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

36
Item Descri
p
tion
Destination
Port
Specify the destination TCP port range in the following two text boxes.
The two text boxes are available after you select TCP.
• If the values of the two text boxes are the same, a single port is specified.
• If the value of the second text box is greater than that of the first, a port range is
specified.
The value of the second text box cannot be less than that of the first.
UDP
Source Port
Specify the source UDP port range in the following two text boxes.
The two text boxes are available after you select UDP.
• If the values of the two text boxes are the same, a single port is specified.
• If the value of the second text box is greater than that of the first, a port range is
specified.
The value of the second text box cannot be less than that of the first.
Destination
Port
Specify the destination UDP port range in the following two text boxes.
The two text boxes are available after you select UDP.
• If the values of the two text boxes are the same, a single port is specified.
• If the value of the second text box is greater than that of the first, a port range is
specified.
The value of the second text box cannot be less than that of the first.
ICMP
Type
Specify the ICMP message type and code.
These items are available after you select ICMP.
Table 18 lists the ICMP message names and their corresponding message types
and codes.
Code
Other
Protocol
Protocol
Number
Specify the protocol to be carried by IP.
This item is available after you select Other Protocol and cannot be set to 1 (for
ICMP), 6 (for TCP), or 17 (UDP).
Table 18 ICMP message names and their corresponding message types and codes
ICMP messa
g
e name T
yp
e Code
echo Type=8 Code=0
echo-reply Type=0 Code=0
fragmentneed-DFset Type=3 Code=4
host-redirect Type=5 Code=1
host-tos-redirect Type=5 Code=3
host-unreachable Type=3 Code=1
information-reply Type=16 Code=0
information-request Type=15 Code=0
net-redirect Type=5 Code=0
net-tos-redirect Type=5 Code=2
net-unreachable Type=3 Code=0
parameter-problem Type=12 Code=0