Egress-Acl Hybrid Rule Type-Tcp - Zte ZXR10 5250 Series Command Reference Manual

ZXR10 5250 Series Command Reference
Guidelines
The IPv6-UDP
destination-specified IPv6, any destination IPv6, UDP source port numbers, UDP
destination port numbers, and VLAN fields.

4.13.72 egress-acl hybrid rule type-tcp

Purpose
This command sets the rule that the hybrid egress ACL matches IPv4-TCP packets.
Command Mode
Hybrid egress ACL configuration mode
Syntax
rule <1-500>{permit | deny} tcp {<source-ipaddr><sip-mask>| any}[source-port <0-65535><s
port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><dport-mask>][dscp
<0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| any][<de
st-mac><dmac-mask>| any]
Parameter Description
Parameter
<1-500>
permit
deny
tcp
<source-ipaddr>
<sip-mask>
source-port <0-65535>
<sport-mask>
any (first)
<destination-ipaddr>
SJ-20131111172707-003|2013-11-27 (R1.0)
rule can match
Description
Rule number.
If the condition matches, access is permitted.
If the condition matches, access is denied.
This rule is only valid for TCP packet. Other packets ignore this
rule.
IP address of the source network or host transmitting packets. It is
a 32-bit IP address expressed in dotted decimal notation.
Source mask and used for source. It is a 32-bit IP address
expressed in dotted decimal notation.
TCP source port number of the transmitted packet
The parameters of source-port can resolve the some known port
numbers. Also the port number and mask can be directly inputted.
Source port mask.
The any keyword is used as the abbreviation of the source 0.0.0.0
and the source mask 0.0.0.0.
Destination network or host of the transmitted packet. It is a 32-bit
IP address expressed in dotted decimal notation.
4-286
source-specified IPv6,
ZTE Proprietary and Confidential
any source IPv6,