3Com 4200G 12-Port Configuration Manual page 220

206 C 26: ACL C
HAPTER ONFIGURATION
Table 175 Rule information (Continued)
Parameter
destination
{ dest-addr
dest-wildcard | any }
precedence
precedence
tos tos
dscp dscp
fragment
time-range
time-name
If the protocol type is TCP or UDP, you can also define the following information:
Table 176 TCP/UDP-specific rule information
Parameter
source-port operator
port1 [ port2 ]
destination-port
operator port1 [
port2 ]
established
If the protocol type is ICMP, you can also define the following information:
Table 177 ICMP-specific rule information
Parameter
icmp-type icmp-type
icmp-code
Type Function
Destination Specifies the
address destination address
information information in the
rule
Packet Packet priority
precedence
Packet ToS priority
precedence
Packet DSCP priority
precedence
Fragment Specifies that the
information rule is effective for
non-initial fragment
packets
Time range Specifies the time
information range in which the
rule is active
Type Function
Source port(s) Defines the source
port information of
UDP/TCP packets
Destination Defines the
port(s) destination port
information of
UDP/TCP packets
"TCP Specifies that the
connection rule will match TCP
established" connection packets
flag with the ack or rst
flag
Type Function
Type and Specifies the type
message code and message code
information of information of
ICMP packets ICMP packets in the
rule
Description
dest-addr dest-wildcard is used to
specify the destination address of
the packet, expressed in dotted
decimal notation
any represents any destination
address
Value range: 0 to 7
Value range: 0 to 15
Value range: 0 to 63
-
-
Description
The value of operator can be lt
(less than), gt (greater than), eq
(equal to), neq (not equal to) or
range (within the range of) Only
the "range" operator requires
two port numbers as the
operands, and other operators
require only one port number as
the operand
port1 and port2: TCP/UDP port
number(s), expressed with
name(s) or numerals; when
expressed with numerals, the
value range is 0 to 65,535
TCP-specific argument
Description
icmp-type: ICMP message type,
ranging 0 to 255
icmp-code: ICMP message code,
ranging 0 to 255