H3C S6812 Series Command Reference Manual page 1536

If the protocol argument is tcp (6) or udp (7), set the parameters shown in
Table 8 TCP/UDP-specific parameters for IPv4 advanced ACL rules
Parameters Function
source-port
Specifies one or
operator port1
more UDP or TCP
[ port2 ] source ports.
destination-port Specifies one or
operator port1 more UDP or TCP
[ port2 ] destination ports.
{ ack ack-value |
Specifies one or
fin fin-value |
more TCP flags
psh psh-value |
including ACK,
rst rst-value |
FIN, PSH, RST,
syn syn-value |
SYN, and URG.
urg urg-value } *
Specifies the flags
for indicating the
established established status
of a TCP
connection.
If the protocol argument is icmp (1), set the parameters shown in
Table 9 ICMP-specific parameters for IPv4 advanced ACL rules
Parameters
icmp-type
{ icmp-type
icmp-code |
icmp-message }
Table 10 ICMP message names supported in IPv4 advanced ACL rules
ICMP message name
echo
echo-reply
fragmentneed-DFset
host-redirect
Description
The operator argument can be lt (lower than), gt (greater than), eq
(equal to), neq (not equal to), or range (inclusive range).
The port1 and port2 arguments are TCP or UDP port numbers in
the range of 0 to 65535. The port2 argument is needed only when
the operator argument is range.
TCP port numbers can be represented as: chargen (19), cmd
(514), daytime (13), discard (9), dns (53), domain (53), echo (7),
exec (512), finger (79), ftp (21), ftp-data (20), gopher (70),
hostname (101), irc (194), klogin (543), kshell (544), login
(513), lpd (515), nntp (119), pop2 (109), pop3 (110), smtp (25),
sunrpc (111), tacacs (49), talk (517), telnet (23), time (37), uucp
(540), whois (43), and www (80).
UDP port numbers can be represented as: biff (512), bootpc (68),
bootps (67), discard (9), dns (53), dnsix (90), echo (7),
mobilip-ag (434), mobilip-mn (435), nameserver (42),
netbios-dgm (138), netbios-ns (137), netbios-ssn (139), ntp
(123), rip (520), snmp (161), snmptrap (162), sunrpc (111),
syslog (514), tacacs-ds (65), talk (517), tftp (69), time (37), who
(513), and xdmcp (177).
Parameters specific to TCP.
The value for each argument can be 0 (flag bit not set) or 1 (flag bit
set).
The TCP flags in a rule are ANDed. For example, a rule configured
with ack 0 psh 1 matches packets that have the ACK flag bit not
set and the PSH flag bit set.
Parameter specific to TCP.
The rule matches TCP packets with the ACK or RST flag bit set.
Function
Specifies the ICMP
message type and
code.
ICMP message type
8
0
3
5
21
Table
Description
The icmp-type argument is in the range of 0 to 255.
The icmp-code argument is in the range of 0 to 255.
The icmp-message argument specifies a message name.
Supported ICMP message names and their corresponding
type and code values are listed in
Table 8.
9.
Table 10.
ICMP message code
0
0
4
1