Command Reference Guide

Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 147
Table 165 TCP/UDP Filter Configuration Menu options
Command
Description
sport <1-65535> <port mask>
Defines a source port for the ACL. If defined, traffic with the
specified TCP or UDP source port will match this ACL. Specify the
port number. Listed below are some of the well-known ports:
Number Name
20 ftp-data
21 ftp
22 ssh
23 telnet
25 smtp
37 time
42 name
43 whois
53 domain
69 tftp
70 gopher
79 finger
80 http
dport <1-65535> <port mask>
Defines a destination port for the ACL. If defined, traffic with the
specified TCP or UDP destination port will match this ACL. Specify
the port number, just as with sport above.
flags <value (0x0-0x3f)>
<mask>
Defines a TCP/UDP flag for the ACL.
reset
Resets the TCP/UDP parameters for the ACL to their default values.
cur
Displays the current TCP/UDP Filtering parameters.
ACL Meter configuration
Command: /cfg/acl/acl <ACL number>/meter
[Metering Menu]
cir - Set committed rate in KiloBits/s
mbsize - Set maximum burst size in KiloBits
enable - Enable/disable port metering
dpass - Set to Drop or Pass out of profile traffic
reset - Reset meter parameters
cur - Display current settings
This menu defines the metering profile for the selected ACL.
Table 166 ACL Meter Configuration Menu options
Command
Description
cir <1000-10000000>
Configures the committed rate, in Kilobits per second. The committed
rate must be a multiple of 1000. The default value is 1000.
mbsize <32-4096>
Configures the maximum burst size, in Kilobits. Enter one of the
following values for mbsize: 32, 64, 128, 256, 512, 1024, 2048, 4096
The default value is 32.
enable e|d
Enables or disables metering on the ACL. The default is disabled.
dpass drop|pass
Configures the ACL Meter to either drop or pass out-of-profile traffic.
reset
Reset ACL Metering parameters to their default values.
cur
Displays the current ACL metering parameters.