HP 3500yl Series Access Security Manual page 488

IPv4 Access Control Lists (ACLs)
Configuring Extended ACLs
10-68
Comparison Operators:
eq < tcp/udp-port-nbr >
•
ACE entry, the TCP or UDP source port number in a packet
must be equal to < tcp/udp-port-nbr >.
gt < tcp/udp-port-nbr >
•
the ACE entry, the TCP or UDP source port number in a
packet must be greater than < tcp/udp-port-nbr >.
lt < tcp/udp-port-nbr >
•
ACE entry, the TCP or UDP source port number in a packet
must be less than < tcp/udp-port-nbr >.
neq < tcp/udp-port-nbr>
•
the ACE entry, the TCP or UDP source port number in a
packet must not be equal to < tcp/udp-port-nbr >.
range < start-port-nbr > < end-port-nbr >
•
ACE entry, the TCP or UDP source-port number in a packet
must be in the range <start-port-nbr >
< end-port-nbr >.
Port Number or Well-Known Port Name:
Use the TCP or UDP port number required by your appli-
cation. The switch also accepts these well-known TCP or
UDP port names as an alternative to their port numbers:
• TCP: bgp, dns, ftp, http, imap4, ldap, nntp, pop2, pop3, smtp, ssl,
telnet
• UDP: bootpc, bootps, dns, ntp, radius, radius-old, rip, snmp,
snmp-trap, tftp
To list the above names, press the
after entering an operator. For a comprehensive listing of
port numbers, visit www.iana.org/assignments/port-
numbers.
[comparison-operator < tcp-dest-port >] [established]
[comparison-operator < udp-dest-port >]
This option, if used, is entered immediately after the < DA >
entry. To specify a TCP or UDP port number, (1) select a
comparison operator and (2) enter the port number or a well-
known port name.
Comparison Operators and Well-Known Port Names —
These are the same as are used with the TCP/UDP source-port
options, and are listed earlier in this command description.
— "Equal To"; to have a match with the
— "Greater Than"; to have a match with
"Less Than"; to have a match with the
—
"Not Equal"; to have a match with
—
For a match with the
—
[Shift] [?]
key combination