Command Reference Guide

Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 140
ACL TCP/UDP Filter configuration
These commands allow you to define TCP/UDP matching criteria for an ACL. The following table
describes the TCP/UDP Filter Configuration commands.
Table 159 TCP/UDP Filter Configuration commands
Command
Description
[no] access-control list
<ACL number> tcp-udp source-
port <1-65535> [<port mask>]
Defines a source port for the ACL. If defined, traffic with the specified
TCP or UDP source port will match this ACL. Specify the port number.
Listed below are some of the well-known ports:
Number Name
20 ftp-data
21 ftp
22 ssh
23 telnet
25 smtp
37 time
42 name
43 whois
53 domain
69 tftp
70 gopher
79 finger
80 http
Command mode: Global configuration
[no] access-control list
<ACL number> tcp-udp
destination-port <1-65535>
[<port mask>]
Defines a destination port for the ACL. If defined, traffic with the
specified TCP or UDP destination port will match this ACL. Specify the
port number, just as with source-port above.
Command mode: Global configuration
[no] access-control list
<ACL number> tcp-udp flags
<value (0x0-0x3f)> [<mask>]
Defines a TCP/UDP flag for the ACL.
Command mode: Global configuration
default access-control list
<ACL number> tcp-udp
Resets the TCP/UDP parameters for the ACL to their default values.
Command mode: Global configuration
show access-control list
<ACL number> tcp-udp
Displays the current TCP/UDP Filtering parameters.
Command mode: All
ACL Packet Format configuration
The following table describes the Packet Format Configuration commands.
Table 160 Packet Format Configuration commands
Command
Description
[no] access-control list <ACL
number> packet-format ethernet
{ethernet-type2|snap|llc|802.3}
Defines the Ethernet format for the ACL. The default is none.
Command mode: Global configuration
[no] access-control list <ACL
number> packet-format tagging
{any|none|tagged}
Defines the tagging format for the ACL. The default is none.
Command mode: Global configuration
default access-control list <ACL
number> packet-format
Resets Packet Format parameters for the ACL to their default
values.
Command mode: Global configuration
show access-control list <ACL
number> packet-format
Displays the current Packet Format parameters for the ACL.
Command mode: All