Ingress-Acl Global Rule Type-Tcp - Zte ZXR10 2900E Series Command Reference Manual

Parameter
dscp <0-63>
fragment
cos <0-7>
<vlan-id>
<vlan-mask>
<source-mac>
<smac-mask>
any (fourth)
<dest-mac>
<dmac-mask>
any (fifth)
Guidelines
The IP rule can match source-specified IPs, any source IPs, destination-specified IPs, any
destination IPs, DSCP fields, IP fragment fields, cos fields, VLAN fields, source-specified
MACs, any source MACs, destination-specified MACs, and any destination MACs. The
rule can be bound to one or all ports.

4.13.41 ingress-acl global rule type-tcp

Purpose
This command sets the rule that the global ingress ACL matches the IPv4-TCP packet.
Command Mode
Global ingress ACL configuration mode
Syntax
rule <1-500>{permit | deny} port {<1-28>| any} tcp {<source-ipaddr><sip-mask>| any}[source-
port <0-65535><sport-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><d
SJ-20130731155059-003|2013-11-27 (R1.0)
Description
This rule is only valid for the message with the specified DSCP
value. Ignore this rule for other messages. The range of DSCP
value is 0 to 63.
This rule is only valid for fragment messages. For non-fragment
messages, this rule is ignored.
This rule is only valid for the cos-specified message. Ignore this
rule for other messages. The range of cos is 0 to 7.
This rule is only valid for messages with the specified VLAN ID.
Ignore this rule for other messages. The rule of VLAN ID is 1
to 4094.
Optional VLAN mask. The default value is 0xfff.
Source MAC address of the transmitted packet.
Source MAC mask.
The any keyword is used as the abbreviation of source MAC
address 00.00.00.00.00.00 and mask 00.00.00.00.00.00.
Destination MAC address of the transmitted packet.
Destination MAC address of the transmitted packet.
The any keyword is used as the abbreviation of the destination
MAC address 00.00.00.00.00.00 and mask 00.00.00.00.00.00.
4-251
Chapter 4 Service Configuration
ZTE Proprietary and Confidential