H3C MSR 20-20 Command Reference Manual page 2114

2114 C 139: IP 6 ACL C
HAPTER V
C
ONFIGURATION OMMANDS
Table 556 TCP/UDP-specific parameters for simple IPv6 ACL rules
Parameter Function
source-port Defines a UDP or
operator port1 TCP source port
[ port2 ] against which
UDP or TCP
packets are
matched.
destination-po Defines a UDP or
rt operator TCP destination
port1 [ port2 ] port against
which UDP or
TCP packets are
matched.
tcp-type Defines a TCP
{ tcpurg | flag.
tcpack | tcppsh
| tcprst | tcpsyn
| tcpfin }
If the protocol argument is set to ICMPv6, you may define the parameters in the
following table.
Table 557 ICMPv6-specific parameters for simple IPv6 ACL rules
Parameter Function
icmpv6-type Specifies a
{ icmpv6-type ICMPv6
icmpv6-code | message
icmpv6-message } type and
code
The following table provides the ICMPv6 messages that you can specify in simple
IPv6 ACL rules.
Table 558 ICMPv6 messages definable in simple IPv4 ACL rules
ICMPv6 message
redirect
echo-request
echo-reply
err-Header-field
frag-time-exceeded
hop-limit-exceeded
host-admin-prohib
host-unreachable
Description
The operator argument can be lt (lower than), gt
(greater than), eq (equal to), and range (inclusive range).
The port1 and port2 arguments each specify a TCP or
UDP port, represented by a number in the range 0 to
65535. TCP port number can be represented in words as
follows:
chargen (19), bgp (179), cmd (514), daytime (13),
discard (9), domain (53), echo (7), exec (512), finger
(79), ftp (21), ftp-data (20), gopher (70), hostname
(101), irc (194), klogin (543), kshell (544), login (513),
lpd (515), nntp (119), pop2 (109), pop3 (110), smtp
(25), sunrpc (111), tacacs (49), talk (517), telnet (23),
time (37), uucp (540), whois (43), or www (80)
UDP port number can be represented in words as
follows: biff (512), bootpc (68), bootps (67), discard
(9), dns (53), dnsix (90), echo (7), mobilip-ag (434),
mobilip-mn (435), nameserver (42), netbios-dgm
(138), netbios-ns (137), netbios-ssn (139), ntp (123),
rip (520), snmp (161), snmptrap (162), sunrpc (111),
syslog (514), tacacs-ds (65), talk (517), tftp (69), time
(37), who (513), xdmcp (177).
Available only when the protocol argument is set to TCP.
Description
The icmpv6-type argument ranges from 0 to 255.
The icmpv6-code argument ranges from 0 to 255.
The icmpv6-message argument specifies a message
name. For available ICMPv6 messages, see Table 558.
ICMPv6 TYPE
Type=137
Type=128
Type=129
Type=4
Type=3
Type=3
Type=1
Type=1
ICMPv6 CODE
Code=0
Code=0
Code=0
Code=0
Code=1
Code=0
Code=1
Code=3