HP 6125G Command Reference Manual page 24

Table 6 Match criteria and other rule information for IPv4 advanced ACL rules
Parameters
source { sour-addr sour-wildcard |
any }
destination { dest-addr dest-wildcard
| any }
counting
precedence precedence
tos tos
dscp dscp
vpn-instance vpn-instance-name
fragment
Function
Specifies a source address
Specifies a destination address
Counts the number of times the
IPv4 ACL rule has been matched
in hardware.
Specifies an IP precedence
value
Specifies a ToS preference
Specifies a DSCP priority
Applies the rule to packets in a
VPN instance
Applies the rule to only non-first
fragments
19
Description
The sour-addr sour-wildcard
arguments represent a source IP
address and wildcard mask in
dotted decimal notation. An all-zero
wildcard specifies a host address.
The any keyword specifies any
source IP address.
The dest-addr dest-wildcard
arguments represent a destination IP
address and wildcard mask in
dotted decimal notation. An all-zero
wildcard specifies a host address.
The any keyword represents any
destination IP address.
—
The precedence argument can be a
number in the range of 0 to 7, or in
words, routine (0), priority (1),
immediate (2), flash (3),
flash-override (4), critical (5),
internet (6), or network (7).
The tos argument can be a number
in the range of 0 to 15, or in words,
max-reliability (2), max-throughput
(4), min-delay (8),
min-monetary-cost (1), or normal
(0).
The dscp argument can be a number
in the range of 0 to 63, or in words,
af11 (10), af12 (12), af13 (14),
af21 (18), af22 (20), af23 (22),
af31 (26), af32 (28), af33 (30),
af41 (34), af42 (36), af43 (38), cs1
(8), cs2 (16), cs3 (24), cs4 (32), cs5
(40), cs6 (48), cs7 (56), default (0),
or ef (46).
The vpn-instance-name argument
takes a case-sensitive string of 1 to
31 characters.
If no VPN instance is specified, the
rule applies only to non-VPN
packets.
Without this keyword, the rule
applies to all fragments and
non-fragments.