Huawei quidway s3526 series Getting Started page 411

Command Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
source-addr wildcard | any: source-addr wildcard is the source IP address and source
address wildcard, expressed in dotted decimal notation. any represents any source
address.
fragment: Indicates that the rule takes effect on fragmented packets only and will be
ignored for other packets.
The parameter of advanced ACL
protocol: This parameter is to define protocol type, which can be indicated by name, or
digit. This parameter can be icmp, igmp, tcp, udp, ip, gre, ospf or ipinip. If this
parameter takes ip, it means all the IP protocols. This parameter can be 1 ~ 255 if
indicated by digit.
Note:
For the rules of IP-any, any-IP, NET-any and any-NET, S3526 does not support packet
filtering of special protocols. You can only configure protocol type as IP (the value of the
parameter protocol in rule command can only be IP) in defining these types of rules in
S3526. Otherwise, error information will be returned when confirm the rule.
source-addr wildcard | any: source-addr wildcard is the source IP address and source
address wildcard, expressed in dotted decimal notation. any represents any source
address.
dest-addr wildcard | any: dest-addr wildcard is the destination IP address and
destination address wildcard, expressed in dotted decimal notation. any represents
any destination address.
source-port operator port1 [ port2 ]: This parameter is to define the source TCP or
UDP port number. Here, operator represents port operation character, including eq
(equal to), gt (greater than), lt (less than), neq (not equal to), and range (in certain
range). Note: This parameter is available only when protocol parameter takes TCP or
UDP. port1 [ port2 ]: TCP or UDP port number of packets, expressed with characters or
numbers. The numbers are in the range of 0 to 65535 and refer to mnemonic symbol
table for character values.
destination-port operator port1 [ port2 ]: This parameter is to define the destination
TCP or UDP port number. The meaning of operator port1 [ port2 ] is same as upper
parameter.
icmp-type type code: Used when protocol is specified as icmp. type code specifies an
ICMP packet. type specifies the ICMP packet type with a number in the range of 0 to
255 or characters. code, ranging from 0 to 255, is used for icmp when ICMP packet
type are not specified with characters.
Huawei Technologies Proprietary
1-9
Chapter 1 ACL Commands