R2511-HP MSR Router Series ACL and QoS Command Reference(V5)

28
Table 13 TCP/UDP-specific parameters for simple ACL rules
Parameters Function Descri
p
tion
source-port operator
port1 [ port2 ]
Specifies one or
more UDP or
TCP source
ports.
The operator argument can be lt (lower than), gt (greater than),
eq (equal to), or range (inclusive range).
The port1 and port2 arguments are TCP or UDP port numbers in
the range of 0 to 65535. port2 is needed only when the
operator argument is range.
TCP port numbers can be represented as: chargen (19), bgp
(179), cmd (514), daytime (13), discard (9), domain (53), echo
(7), exec (512), finger (79), ftp (21), ftp-data (20), gopher (70),
hostname (101), irc (194), klogin (543), kshell (544), login
(513), lpd (515), nntp (119), pop2 (109), pop3 (110), smtp
(25), sunrpc (111), tacacs (49), talk (517), telnet (23), time
(37), uucp (540), whois (43), and www (80).
UDP port numbers can be represented as: biff (512), bootpc
(68), bootps (67), discard (9), dns (53), dnsix (90), echo (7),
mobilip-ag (434), mobilip-mn (435), nameserver (42),
netbios-dgm (138), netbios-ns (137), netbios-ssn (139), ntp
(123), rip (520), snmp (161), snmptrap (162), sunrpc (111),
syslog (514), tacacs-ds (65), talk (517), tftp (69), time (37),
who (513), and xdmcp (177).
destination-port
operator port1 [ port2 ]
Specifies one or
more UDP or
TCP destination
ports.
tcp-type { tcpurg |
tcpack | tcppsh | tcprst
| tcpsyn | tcpfin }
Specifies a TCP
flag.
Parameters specific to TCP.
If the protocol argument takes icmpv6 (58), you can set the parameters shown in Table 14.
Table 14 ICMPv6-specific parameters for simple ACL rules
Parameters Function Descri
p
tion
icmp6-type
{ icmp6-type
icmp6-code |
icmp6-message }
Specifies the
ICMPv6 message
type and code.
The icmp6-type argument is in the range of 0 to 255.
The icmp6-code argument is in the range of 0 to 255.
The icmp6-message argument specifies a message name.
Supported ICMP message names and their corresponding type
and code values are listed in Table 15.
Table 15 ICMPv6 message names supported in simple ACL rules
ICMPv6 messa
g
e name ICMPv6 messa
g
e t
yp
e ICMPv6 messa
g
e code
echo-reply 129 0
echo-request 128 0
err-Header-field 4 0
frag-time-exceeded 3 1
hop-limit-exceeded 3 0
host-admin-prohib 1 1
host-unreachable 1 3
neighbor-advertisement 136 0