Download Print this page

Port-Mapping Acl - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

If the destination port of a packet matches a general port mapping, APR recognizes the packet as the
specified application protocol's packet.
If two port mappings are configured with the same port number and transport layer protocol, but with
different application protocols, the most recent configuration takes effect.
A mapping with the transport layer protocol specified has a higher priority than one without it.
Examples
# Create a general port mapping of port 3456 to FTP.
<Sysname> system-view
[Sysname] port-mapping application ftp port 3456
Related commands
display port-mapping user-defined

port-mapping acl

Use port-mapping acl to configure an ACL-based host-port mapping.
Use undo port-mapping acl to remove an ACL-based host-port mapping.
Syntax
port-mapping application application-name port port-number [ protocol protocol-name ] acl
[ ipv6 ] acl-number
undo port-mapping application application-name port port-number [ protocol protocol-name ]
acl [ ipv6 ] acl-number
Default
An application protocol is mapped to a well-known port.
Views
System view
Predefined user roles
network-admin
Parameters
application application-name: Specifies an application protocol by its name, a case-insensitive
string of 1 to 63 characters. The names invalid and other are not allowed.
port port-number: Specifies a port by its number in the range of 0 to 65535.
protocol protocol-name: Specifies a transport layer protocol by its name, including:
dccp: Specifies DCCP.
sctp: Specifies SCTP.
tcp: Specifies TCP.
udp: Specifies UDP.
udp-lite: Specifies UDP-Lite.
acl [ ipv6 ] acl-number: Specifies the number of an ACL, in the range of 2000 to 2999. To specify an
IPv6 ACL, include the ipv6 keyword. To specify an IPv4 ACL, do not include the ipv6 keyword.
Usage guidelines
APR uses ACL-based host-port mappings to recognize packets. A packet is recognized as an
application protocol packet when it matches all the following conditions in a mapping:
699

Advertisement

loading