H3C IE4300 Command Reference Manual page 1698

Table 13 TCP/UDP-specific parameters for IPv6 advanced ACL rules
Parameters
source-port
operator port
destination-port
operator port
ack ack-value
{ |
fin fin-value
|
psh psh-value
|
rst rst-value
|
syn syn-value
|
urg urg-value
} *
established
If the argument is icmpv6 (58), set the parameters shown in
protocol
Table 14 ICMPv6-specific parameters for IPv6 advanced ACL rules
Parameters
icmp6-type
icmp6-type
{
icmp6-code
|
icmp6-message
}
Table 15 ICMPv6 message names supported in IPv6 advanced ACL rules
ICMPv6 message name
echo-reply
echo-request
Function
Specifies a UDP or
TCP source port.
Specifies a UDP or
TCP destination
port.
Specifies one or
more TCP flags,
including ACK, FIN,
PSH, RST, SYN,
and URG.
Specifies the flags
for indicating the
established status
of a TCP
connection.
Function Description
The
The
Specifies the ICMPv6
message type and
The
code.
name. Supported ICMP message names and their
corresponding type and code values are listed in
15.
ICMPv6 message type
129
128
29
Description
operator
The argument can be lt (lower than), gt
(greater than), eq (equal to), or range (inclusive range).
port1 port2
The and
port numbers in the range of 0 to 65535. The
argument is needed only when the
range
argument is .
TCP port numbers can be represented as: chargen (19),
bgp (179), cmd (514), daytime (13), discard (9), dns
(53), domain (53), echo (7), exec (512), finger (79), ftp
(21), ftp-data (20), gopher (70), hostname (101), irc
(194), klogin (543), kshell (544), login (513), lpd (515),
nntp (119), pop2 (109), pop3 (110), smtp (25), sunrpc
(111), tacacs (49), talk (517), telnet (23), time (37),
uucp (540), whois (43), and www (80).
UDP port numbers can be represented as: biff (512),
bootpc (68), bootps (67), discard (9), dns (53), dnsix
(90), echo (7), mobilip-ag (434), mobilip-mn (435),
nameserver (42), netbios-dgm (138), netbios-ns
(137), netbios-ssn (139), ntp (123), rip (520), snmp
(161), snmptrap (162), sunrpc (111), syslog (514),
tacacs-ds (65), talk (517), tftp (69), time (37), who
(513), and xdmcp (177).
Parameters specific to TCP.
The value for each argument can be 0 (flag bit not set) or
1 (flag bit set).
The TCP flags in a rule are ANDed. For example, a rule
configured with ack 0 psh 1 matches packets that have
the ACK flag bit not set and the PSH flag bit set.
Parameter specific to TCP.
The rule matches TCP packets with the ACK or RST flag
bit set.
icmp6-type
argument is in the range of 0 to 255.
icmp6-code
argument is in the range of 0 to 255.
icmp6-message
arguments are TCP or UDP
port2
operator
Table 14.
argument specifies a message
Table
ICMPv6 message code
0
0