3Com 7750 Series Command Reference Manual page 800

3Com Switch 7750 Series
Command Reference Guide – ACL
Table 1-12 TCP/UDP-specific rule information
Parameter
source-port
operator
[ port2 ]
destination-port
operator
[ port2 ]
established
Note:
Only the A type card supports the "range" operation on the TCP/UDP port.
If the protocol type is ICMP, you can also define the following information:
Table 1-13 ICMP-specific rule information
Parameter
icmp-type
icmp-type
icmp-code
If the protocol type is ICMP, you can also directly input the ICMP message name after
the icmp-type argument. Table 1-14 describes some common ICMP messages.
Type
Source
port1
port(s)
Destination
port1
port(s)
"TCP
connection
established"
flag
Type
Type and
message
code
information
of ICMP
packets
1-19
Function
Defines the The value of operator can
source port be lt (less than), gt (greater
information of
than), eq (equal to), neq
UDP/TCP (not equal to) or range
packets (within the range of) Only
the range requires two port
numbers as the operands,
and other operators require
only one port number as the
Defines the
operand.
destination port
port1 and port2: TCP/UDP
information of
port number(s), expressed
UDP/TCP
with name(s) or numerals;
packets
when
numerals, the value range
is 0 to 65,535.
Specifies that
the rule will
match TCP
TCP-specific argument
connection
packets with the
ack or rst flag
Function
Specifies the
icmp-type: ICMP message
type and
type, ranging 0 to 255
message code
information of
icmp-code: ICMP message
ICMP packets
code, ranging 0 to 255
in the rule
Chapter 1 ACL Commands
Description
expressed with
Description