Understanding Acl Priority; Table 13: Well-Known Application Ports - Juniper EX2500 Configuration Manual

Table 13: Well-Known Application Ports

Number
20
21
22
23
25
37
42
43
53
69
70

Understanding ACL Priority

Each ACL has a unique priority value, based on its number. The lower the ACL
number, the higher the priority, so ACL 1 has the highest priority.
The priority value is used to decide which ACL rule to apply when a packet matches
one or more ACLs. When an incoming packet matches the highest priority ACL, the
ACL's configured action takes place. The other assigned ACLs are considered in
numeric order, from lowest to highest.
In the following example, the switch considers ACL 128 before ACL 130 because
ACL 128 has a higher priority. The order in which the ACLs are assigned to a port
does not affect their priority.
Port 1 access group
ACL IP Extended 128:
TCP
Port number = 80
Action = permit
ACL IP Extended 129:
TCP
Port number = 23
Action = deny
ACL IP Extended 130:
TCP
Port number = less than 100
Action = permit
TCP/UDP
Application Number
ftp-data 79
ftp 80
ssh 109
telnet 110
smtp 111
time 119
name 123
whois 143
domain 144
tftp 161
gopher 162
TCP/UDP
Application Number
finger 179
http 194
pop2 220
pop3 389
sunrpc 443
nntp 520
ntp 554
imap 1645, 1812
news 1813
snmp 1985
snmptrap
Chapter 5: Quality of Service
TCP/UDP
Application
bgp
irc
imap3
ldap
https
rip
rtsp
RADIUS
RADIUS accounting
hsrp
55
Using ACL Filters