H3C S6550X-HI Series Command Reference Manual page 2140

destination-portoperator
port1 [ port2 ]
ack ack-value
{ |
fin-value psh psh-value
|
rst rst-value syn
|
urg urg-value
syn-value
|
established
If the argument is icmpv6 (58), set the parameters shown in
protocol
Table 8 ICMPv6-specific parameters for IPv6 advanced ACL rules
Parameters
icmp6-type
icmp6-type
{
icmp6-code
|
icmp6-message
}
Table 9 ICMPv6 message names supported in IPv6 advanced ACL rules
ICMPv6 message name
echo-reply
echo-request
ports.
Specifies one or
more UDP or
TCP destination
ports.
Specifies one or
fin
more TCP flags,
|
including ACK,
FIN, PSH, RST,
} *
SYN, and URG.
Specifies the
flags for
indicating the
established
status of a TCP
connection.
Function
Specifies the ICMPv6
message type and
code.
ICMPv6 message type
129
128
16
to), or range (inclusive range).
port1
The and
or UDP port numbers in the range of 0 to
port2
65535. The
operator
when the
TCP port numbers can be represented as:
chargen (19), bgp (179), cmd (514),
daytime (13), discard (9), dns (53), domain
(53), echo (7), exec (512), finger (79), ftp
(21), ftp-data (20), gopher (70), hostname
(101), irc (194), klogin (543), kshell (544),
login (513), lpd (515), nntp (119), pop2
(109), pop3 (110), smtp (25), sunrpc (111),
tacacs (49), talk (517), telnet (23), time (37),
uucp (540), whois (43), and www (80).
UDP port numbers can be represented as:
biff (512), bootpc (68), bootps (67), discard
(9), dns (53), dnsix (90), echo (7),
mobilip-ag (434), mobilip-mn (435),
nameserver (42), netbios-dgm (138),
netbios-ns (137), netbios-ssn (139), ntp
(123), rip (520), snmp (161), snmptrap
(162), sunrpc (111), syslog (514), tacacs-ds
(65), talk (517), tftp (69), time (37), who
(513), and xdmcp (177).
Parameters specific to TCP.
The value for each argument can be 0 (flag bit
not set) or 1 (flag bit set).
The TCP flags in a rule are ANDed. For
example, a rule configured with ack 0 psh 1
matches the packets that have the ACK flag
bit not set and the PSH flag bit set.
Parameter specific to TCP.
The rule matches TCP packets with the ACK
or RST flag bit set.
Description
icmp6-type
The argument is in the range of 0 to 255.
icmp6-code
The argument is in the range of 0 to 255.
icmp6-message
The
name. Supported ICMP message names and their
corresponding type and code values are listed in
port2
arguments are TCP
argument is needed only
argument is range.
Table 8.
argument specifies a message
Table
ICMPv6 message code
0
0
9.