H3C S7500 Series Operation Manual page 671

Operation Manual – ACL
H3C S7500 Series Ethernet Switches
Parameter
established
Note:
Only Type A LPUs support the "range" operation on the TCP/UDP port.
If the protocol type is ICMP, you can also define the following information:
Table 1-11 ICMP-specific rule information
Parameter
icmp-type
icmp-type
icmp-code
If the protocol type is ICMP, you can also directly input the ICMP message name after
the icmp-type argument. The following table describes some common ICMP
messages.
Table 1-12 ICMP messages
echo
echo-reply
fragmentneed-DFset
host-redirect
host-tos-redirect
host-unreachable
information-reply
information-request
net-redirect
net-tos-redirect
Type
"TCP
connection
established"
flag
Type
Type and message
code information
of ICMP packets
Name
Type=8
Type=0
Type=3
Type=5
Type=5
Type=3
Type=16
Type=15
Type=5
Type=5
Function
Specifies that the
rule is applicable
only to the first
SYN segment for
establishing a
TCP connection
Function
Specifies the type
and message code
information of
ICMP packets in
the ACL rule
ICMP TYPE
1-13
Chapter 1 ACL Configuration
Remarks
TCP-specific argument
Remarks
icmp-type: ICMP
message type,
ranging 0 to 255
icmp-code: ICMP
message code,
ranging 0 to 255
ICMP CODE
Code=0
Code=0
Code=4
Code=1
Code=3
Code=1
Code=0
Code=0
Code=0
Code=2