H3C S7500 Series Ethernet Switches Command Manual

Command Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Commands
1-19
Parameter Type Function Description
established
“TCP
connection
established”
flag
Specifies that the
rule is applicable
only to the first
SYN segment for
establishing a
TCP connection
TCP-specific argument
 Note:
Only the Type A LPUs support the “range” operation on the TCP/UDP port.
If the protocol type is ICMP, you can also define the following information:
Table 1-13 ICMP-specific rule information
Parameter Type Function Description
icmp-type
icmp-type
icmp-code
Type and
message code
information of
ICMP packets
Specifies the type
and message code
information of
ICMP packets in
the rule
icmp-type: ICMP
message type,
ranging 0 to 255
icmp-code: ICMP
message code,
ranging 0 to 255
If the protocol type is ICMP, you can also directly input the ICMP message name after
the icmp-type argument.
Table 1-14 describes some common ICMP messages.
Table 1-14 ICMP messages
Name ICMP TYPE ICMP CODE
echo Type=8 Code=0
echo-reply Type=0 Code=0
fragmentneed-DFset Type=3 Code=4
host-redirect Type=5 Code=1
host-tos-redirect Type=5 Code=3
host-unreachable Type=3 Code=1
information-reply Type=16 Code=0
information-request Type=15 Code=0
net-redirect Type=5 Code=0
net-tos-redirect Type=5 Code=2
net-unreachable Type=3 Code=0