H3C S7500E Series Command Manual page 1111

Command Manual – ACL
H3C S7500E Series Ethernet Switches
Table 1-10 TCP/UDP-specific match criteria for advanced IPv6 ACL rules
Parameters
source-port
operator port1
[ port2 ]
destination-port
operator port1
[ port2 ]
If the protocol argument is set to ICMPv6, you may define the parameters in the
following table.
Function
Defines the The operator argument can be lt (lower than),
source port in gt (greater than), eq (equal to), or range
the UDP/TCP (inclusive range).
packet.
The port1 and port2 arguments each specify a
TCP or UDP port, represented by a number in
the range 0 to 65535. TCP port number can
be represented in words as follows:
chargen (19), bgp (179), cmd (514),
daytime (13), discard (9), domain (53),
echo (7), exec (512), finger (79), ftp (21),
ftp-data (20), gopher (70), hostname (101),
irc (194), klogin (543), kshell (544), login
(513), lpd (515), nntp (119), pop2 (109),
pop3 (110), smtp (25), sunrpc (111), tacacs
(49), talk (517), telnet (23), time (37), uucp
(540), whois (43), or www (80).
UDP port number can be represented in
words as follows: biff (512), bootpc (68),
Defines the
bootps (67), discard (9), dns (53), dnsix
destination
(90), echo (7), mobilip-ag (434), mobilip-mn
port in the
(435), nameserver (42), netbios-dgm (138),
UDP/TCP
netbios-ns (137), netbios-ssn (139), ntp
packet.
(123), rip (520), snmp (161), snmptrap
(162), sunrpc (111), syslog (514), tacacs-ds
(65), talk (517), tftp (69), time (37), who
(513), xdmcp (177).
With the range operator, the value of port2
does not need to be greater than that of port1
because the switch can automatically judge
the value range. If the two values are the
same, the switch will convert the operator
range to eq.
Note that if you specify a combination of lt 1 or
gt 65534, the switch will convert it to eq 0 or
eq 65535.
1-31
Chapter 1 ACL Configuration Commands
Description