Huawei Quidway S3900 Series Operation Manual page 648

Operation Manual – ACL
Quidway S3900 Series Ethernet Switches-Release 1510
af42
af43
cs1
cs2
cs3
cs4
cs5
cs6
cs7
be (default)
If the protocol type is TCP or UDP, you can also define the following information:
Table 1-6 TCP/UDP-specific rule information
Parameter
source-port
operator
[ port2 ]
destination-port
operator
[ port2 ]
established
If the protocol type is ICMP, you can also define the following information:
Keyword DSCP value in decimal
36
38
8
16
24
32
40
48
56
0
Type
Source
port1
port(s)
Destination
port1
port(s)
"TCP
connection
established"
flag
Huawei Technologies Proprietary
Function
Defines the The value of operator can
source port be lt (less than), gt (greater
information of than), eq (equal to), neq
UDP/TCP (not equal to) or range
packets (within the range of) Only
the
requires two port numbers
as the operands, and other
operators require only one
Defines the
port number as the operand
destination port
port1 and port2: TCP/UDP
information of
port number(s), expressed
UDP/TCP
with name(s) or numerals;
packets
when
numerals, the value range
is 0 to 65,535
Specifies that
the rule will
match TCP
TCP-specific argument
connection
packets with the
ack or rst flag
1-9
Chapter 1 ACL Configuration
DSCP value in binary
100100
100110
001000
010000
011000
100000
101000
110000
111000
000000
Description
"range" operator
expressed with