Zte ZXR10 2900E Series Command Reference Manual page 312

ZXR10 2900E Series Command Reference
port-mask>][dscp <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><sma
c-mask>| any][<dest-mac><dmac-mask>| any]
Parameter Description
Parameter
<1-16>
permit
deny
<1-28>
any (first)
tcp
<source-ipaddr>
<sip-mask>
source-port <0-65535>
<sport-mask>
any (second)
<destination-ipaddr>
<dip-mask>
any (third)
dest-port <0-65535>
<dport-mask>
dscp <0-63>
SJ-20130731155059-003|2013-11-27 (R1.0)
Description
Global rule number.
If the condition matches, access is permitted.
If the condition matches, access is denied.
Binds the global rule to a port. Different devices have different
port number ranges. In the syntax, the 2928E device is used as
an example.
Binds the global rule to all ports.
This rule only matches TCP packet. The non-TCP packet ignores
this rule.
This rule only matches IP packet. The non-IP packet ignores this
rule.
Source mask used for sources. It is a 32-bit IP address expressed
in dotted decimal notation.
TCP source port number of the transmitted packet
The source-port parameter resolve some known port number.
Also the port number and mask can be entered.
Source port mask.
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
Destination network or host of the transmitted packet. It is a 32-bit
IP address expressed in dotted decimal notation.
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
TCP destination port number of the transmitted packet
The dest-port parameter resolve some known port number. Also
the port number and mask can be entered.
Destination port mask.
This rule is only valid for the message with the specified DSCP
value. Ignore this rule for other messages. The range of DSCP
value is 0 to 63.
4-252
ZTE Proprietary and Confidential