3Com 3C13636 Configuration Manual page 1076

3Com Router 3000 Ethernet Family
Configuration Guide
Parameter description:
rule-id: Optional parameter, number of ACL rule, ranging from 0 to 65534. After
the number is specified, if the ACL rule related to the number has existed, a newly
defined rule may be used to overwrite the old definition, just as editing an existing
ACL rule. If the ACL rule related to the number does not exist, use the specified
number to create a new rule. When the number is not specified, it indicates to add
a new rule. In this case, the system will assign a number automatically for the ACL
rule and add the new rule.
deny: Discard qualified data packet.
permit: Permit qualified data packet.
comment text: Specifies a comment for each rule.
protocol: IP carried protocol type represented by name or number. The number
range is from 1 to 255. The name can be gre, icmp, igmp, ip, ipinip, ospf, tcp, and
udp.
source: Optional parameter, used to specify source address information of ACL
rule. If it is not configured, it indicates any source address of the packet matches.
source-addr: Source address of data packet, in dotted decimal. Or, "any" may be
used to represent source address 0.0.0.0, with wildcard being 255.255.255.255.
source-wildcard: Wildcard of source address, in dotted decimal.
destination: Optional parameter, used to specify destination address information
of ACL rule. If it is not configured, it indicates any destination address of the packet
matches.
dest-addr: Destination address of data packet, in dotted decimal. Or, "any" may be
used
255.255.255.255.
dest-wildcard: Destination address wildcard, in dotted decimal. Or, "any" may be
used
255.255.255.255.
icmp-type: Optional parameter, used to specify type of ICMP packet and
message code information, only valid when the packet protocol is ICMP. If it is not
configured, it indicates any type of ICMP packet matches.
icmp-type: ICMP packet can be filtered according to the message type of ICMP. It
is a number ranging from 0 to 255.
icmp-code: ICMP packet filtered according to ICMP message type can also be
filtered according to message code. It is a number ranging from 0 to 255.
icmp-message: ICMP packet can be filtered according to name of ICMP type or
name of ICMP code.
source-port: Optional parameter, used to specify source port information of UDP
or TCP message, only valid when the specified protocol number is TCP or UDP. If
it is not specified, it indicates any source port information of TCP/UDP packet
matches.
to represent destination
to represent destination
3Com Corporation
address 0.0.0.0,
address 0.0.0.0,
5-5
Chapter 5 ACL Configuration
with wildcard being
with wildcard being