Ingress-Acl Extend Rule Type-Udp - Zte ZXR10 5250 Series Command Reference Manual

Parameter
<dip-mask>
any (second)
dest-port <0-65535>
<dport-mask>
establishing
established
dscp <0-63>
fragment
Guidelines
The TCP rule can match TCP packets with specified source IP addresses, any source
IP address, specified destination IP addresses, any destination IP address, TCP source
port numbers, TCP destination port numbers, active TCP links, passive TCP links, DSCP
fields, or IP fragment fields.

4.13.16 ingress-acl extend rule type-udp

Purpose
This command sets the rule that the extended ingress ACL is used to match User Datagram
Protocol (UDP) messages.
Command Mode
Extended ingress ACL configuration mode
Syntax
rule <1-500>{permit | deny} udp {<source-ipaddr><sip-mask>| any}[source-port <0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><dport-mask>][dscp
<0-63>][fragment]
SJ-20131111172707-003|2013-11-27 (R1.0)
Description
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
TCP destination port number of the transmitted packet
The parameters of dest-port can resolve the some known port
numbers. Also the port number and mask can be directly inputted.
Destination port number mask.
This rule is only valid for the messages that actively establish
TCP connections. It matches flag ack=0, syn=1. Ignore this rule
for other messages.
This rule is only valid for the messages that passively establish
TCP connections. It matches flag ack=1, syn=1. Ignore this rule
for other messages.
This rule is only valid for messages with the specified DSCP value.
Ignore this rule for other messages. The range of DSCP is 0 to 63.
This rule is only valid for fragment messages. Non–fragment
messages ignore this rule.
4-225
Chapter 4 Service Configuration
ZTE Proprietary and Confidential