H3C S6550X-HI Series Command Reference Manual page 2148

Table 1 TCP-specific parameters for user-defined ACL rules
Parameters
ack ack-value
fin fin-value
psh psh-value
rst rst-value
syn syn-value
urg urg-value
established
precedence precedence
one of the following keywords:
(4),
flash-override
: Specifies a ToS value in the range of 0 to 15 or specifies one of the following keywords:
tos tos
max-reliability
and normal (0).
: Specifies a DSCP value, which can be a number from 0 to 63 or a keyword in
dscp dscp
Table 2 DSCP keywords and values
Keyword
af11
af12
af13
af21
af22
af23
af31
af32
af33
af41
af42
af43
cs1
cs2
cs3
cs4
cs5
Function
Specifies one or more
TCP flags including
ACK, FIN, PSH, RST,
SYN, and URG.
Specifies the flags for
indicating the
established status of a
TCP connection.
: Specifies an IP precedence value in the range of 0 to 7 or specifies
routine
(5),
critical internet
(2),
max-throughput
DSCP value (binary)
001010
001100
001110
010010
010100
010110
011010
011100
011110
100010
100100
100110
001000
010000
011000
100000
101000
24
Description
The value for each argument can be 0 (flag
bit not set) or 1 (flag bit set).
The TCP flags in a rule are ANDed. For
example, a rule configured with
matches packets that have the ACK flag bit
not set and the PSH flag bit set.
The rule matches TCP connection packets
with the ACK or RST flag bit set.
(0), (1),
priority
(6), and
network
(4), (8),
min-delay
DSCP value (decimal)
10
12
14
18
20
22
26
28
30
34
36
38
8
16
24
32
40
ack
(2),
immediate flash
(7).
min-monetary-cost
psh
0 1
(3),
(1),
Table 2.