D-Link DXS-3600-16S Manual page 35

protocol
operator
port
precedence precedence
tos tos
fragments
time-range time-range-
name
tcp-flag
icmp-type
icmp-code
icmp-message
Default
Command Mode
Command Default Level
Usage Guideline
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
Specifies the name or number of an IP protocol used. Names that can be used are
'eigrp', 'esp', 'gre', 'igmp', 'ip', 'ipinip', 'ospf', 'pcp', 'pim', 'tcp', 'udp', 'icmp' or an integer
in the range 0 to 255 representing an IP protocol number. This field is used to match
any Internet protocol. There are additional specific parameters for 'tcp', 'udp', and
'icmp'. The 'ip' means any IP Protocol.
(Optional) Specifies the operator used. Possible operators include 'eq' (equal), 'gt'
(greater than), 'lt' (less than), 'neq' (not equal), and 'range' (inclusive range). A range
needs two port numbers, while other operators only need one port number.
Specifies the Layer 4 port number as a decimal number (from 0 to 65535) or the
name of a L4 port.
TCP port names used:
'bgp', 'chargen', 'daytime', 'discard', 'domain', 'echo', 'rexec', 'finger', 'ftp', 'ftp-data',
'gopher', 'hostname', 'ident', 'irc', 'klogin', 'kshell', 'login', 'lpd', 'nntp', 'snpp',
'pop2', 'pop3', 'smtp', 'sunrpc', 'shell', 'tacacs', 'telnet', 'time', 'uucp', 'whois',
'http'.
UDP port names used:
'biff', 'bootpc', 'bootps', 'discard', 'irc', 'domain', 'echo', 'isakmp', 'mobile-ip',
'nameserver', 'netbios-dgm', 'netbios-ns', 'netbios-ss', 'nat-t', 'ntp', 'snpp', 'rip',
'snmp', 'snmptrap', 'sunrpc', 'syslog', 'tacacs', 'talk', 'tftp', 'time', 'who', 'xdmcp'.
(Optional) Packets can be filtered by their precedence level. This is specified by a
number from 0 to 7 or by name. Names that can be used are routine (0), priority (1),
immediate (2), flash (3), flash-override (4), critical (5), internet (6), network (7).
(Optional) Packets can be filtered by their type of service level. This is specified by a
number from 0 to 15 or by name. Names that can be used are normal (0), max-
reliability (2), max-throughput (4), min-delay (8), min-monetary-cost (1).
(Optional) Specifies packet fragment filtering.
(Optional) Specifies the name of the time-period profile associated with the access-
list delineating its activation period.
(Optional) Specifies the TCP flag fields. The specified TCP header bits can be 'ack'
(acknowledge), 'fin' (finish), 'psh' (push), 'rst' (reset), 'syn' (synchronize), or 'urg'
(urgent).
(Optional) Specifies the ICMP message type. The valid number for the message type
is from 0 to 255.
(Optional) Specifies the ICMP message code. The valid number for the message
code is from 0 to 255
(Optional) Specifies the ICMP message type name or the ICMP message type and
code by name. Names that can be used are 'administratively-prohibited', 'alternate-
address', 'conversion-error', 'host-prohibited', 'net-prohibited', 'echo', 'echo-reply',
'pointer-indicates-error', 'host-isolated', 'host-precedence-violation', 'host-redirect',
'host-tos-redirect', 'host-tos-unreachable', 'host-unknown', 'host-unreachable',
'information-reply', 'information-request', 'mask-reply', 'mask-request', 'mobile-
redirect', 'net-redirect', 'net-tos-redirect', 'net-tos-unreachable', 'net-unreachable',
'net-unknown', 'bad-length', 'option-missing', 'packet-fragment', 'parameter-problem',
'port-unreachable', 'precedence-cutoff', 'protocol-unreachable', 'reassembly-timeout',
'redirect-message', 'router-advertisement', 'router-solicitation', 'source-quench',
'source-route-failed', 'time-exceeded', 'timestamp-reply', 'timestamp-request',
'traceroute', 'ttl-expired', 'unreachable'.
None.
Extended Expert Access-list Configuration Mode.
Level: 12
A sequence number will be assigned automatically if the user did not assign it
manually. The automatic assignment sequence number starts from 10 and increases
by 10 for every new entry.
27