HP xw460c Blade ACL TCP/UDP Filter configuration, Sport 1-65535 port mask, Flags value 0x0-0x3f

Page 149

Table 162 IPv4 Filter Configuration Menu options

Command	Description

proto <0-255>	Defines an IP protocol for the ACL. If defined, traffic from the specified protocol
	matches this filter. Specify the protocol number. Listed below are some of the
	well-known protocols.
	Number	Name
	1	icmp
	2	igmp
	6	tcp
	17	udp
	89	ospf
	112	vrrp

tos <0-255>	Defines a Type of Service value for the ACL. For more information on ToS, see
	RFC 1340 and 1349.

reset	Resets the IPv4 parameters for the ACL to their default values.

cur	Displays the current IPV4 parameters.

ACL TCP/UDP Filter configuration

Command: /cfg/acl/acl <1-762>/tcpudp

[Filtering TCP/UDP Menu]


sport	- Set to filter on		TCP/UDP source port
dport	- Set	to filter on TCP/UDP destination port
flags	- Set	to filter TCP/UDP flags
reset	- Reset all fields
cur	- Display current parameters

This menu allows you to define TCP/UDP matching criteria for an ACL. The following table describes the TCP/UDP Filter Configuration Menu options.

Table 163 TCP/UDP Filter Configuration Menu options

Command	Description

sport <1-65535> <port mask>	Defines a source port for the ACL. If defined, traffic with the specified TCP or
	UDP source port will match this ACL. Specify the port number. Listed below are
	some of the well-known ports:
	Number	Name
	20	ftp-data
	21	ftp
	22	ssh
	23	telnet
	25	smtp
	37	time
	42	name
	43	whois
	53	domain
	69	tftp
	70	gopher
	79	finger
	80	http

dport <1-65535>	Defines a destination port for the ACL. If defined, traffic with the specified TCP
	or UDP destination port will match this ACL. Specify the port number, just as
	with sport above.

flags <value (0x0-0x3f)>	Defines a TCP/UDP flag for the ACL.

reset	Resets the TCP/UDP parameters for the ACL to their default values.

cur	Displays the current TCP/UDP Filtering parameters.

Configuration Menu 149

Image 149

Contents HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Page Contents Statistics Menu Configuration Menu 111 Index Command line interface Introduction Connecting to the switchAdditional references Establishing a console connectionTelnet GbE2c Ethernet Blade Switch IP address Setting an IP addressEstablishing a Telnet connection Establishing an SSH connection# ssh user@GbE2c Ethernet Blade Switch IP address Accessing the switchIdle timeout AaBbCc123 Typographical conventionsMenu summary Main MenuTraceroute host name IP address max-hops msec Global commandsDelay Telnet hostname IP address port Command line history and editingCommand stacking Command line interface shortcutsCommand abbreviation Tab completion# /cfg/sys/access/snmp disableread onlyread/write Configuring Simple Network Management Protocol supportMain# /cfg # /cfg/sys/ssnmp/rcommwcommSystem# apply System# save Setting passwordsChanging the default administrator password Changing the default user password Changing the default operator password Menu overview Information MenuSNMPv3 Information Menu System Information MenuSNMPv3 USM User Table information AdminshaComm V1v2onlySNMPv3 View Table information SNMPv3 Access Table informationPrefix SNMPv3 Group Table informationSNMPv3 Community Table information SNMPv3 Target Parameters Table information SNMPv3 Target Address Table informationSec Level Command /info/sys/snmpv3/notify NameTag V1v2trapv1v2trapSNMPv3 Notify Table information SNMPv3 dump System information System user information Show last 100 syslog messages8021x Stp Cfg/sys/access/user/uid commandLayer 2 information Port port number FDB information menuFind MAC address Vlan Show all FDB information Link Aggregation Control Protocol informationLacp dump 802.1x information Authenticator PAE State Port Auth ModeCommand /info/l2/stp Spanning Tree informationPath-Cost Current RootPriority bridge HelloDesignated port Rapid Spanning Tree and Multiple Spanning Tree informationDesg 8017 P2P2,Edge Desg 8018Disabled DSB Common Internal Spanning Tree information Discarding Disc , Learning LRN , Forwarding FWD , or Disabled DSBTrunk group information Layer 3 information Vlan informationLayer 2 general information Find IP address Route informationGw IP address If IP addressShow all IP Route information ARP information Command /info/arp/dump IP address Flags MAC addressShow all ARP entry information VlanDbase Sumaddr Nsumadd Routes Dump Ospf informationNbr nbr router-id A.B.C.D Ospf Database information menu Ospf general informationOspf interface information Asbrsum adv-rtr A.B.C.D Linkstateid A.B.C.Dself Advrtr router-id A.B.C.DExt adv-rtr A.B.C.D linkstateid A.B.C.Dself Nw adv-rtr A.B.C.D linkstateid A.B.C.DselfRIP Routes information Ospf route codes informationRouting Information Protocol information Igmp multicast group information RIP user configurationIP information Vrrp information Command /info/l3/vrrp Vrrp informationIgmp multicast router port information 802.1p information QoS informationQoS Menu 8021p Show QOS 802.1p information 8021pRmon Information Menu ACL informationInterval Rmon history informationRmon event information Rmon alarm informationCommand /info/rmon/event Link status information VLANs Command /info/port Port Tag Rmon PvidPort information Uplink Failure Detection Enabled LtM status Down Member Command /info/geaport Logical Port GEA Port0-based GEA UnitLogical Port to GEA Port mapping Uplink Failure Detection informationInformation dump Command /info/dumpUfd clear Menu informationNtp clear Port Statistics Menu AuthSuccessesWhile Authenticating802.1x statistics Supplicant Bridging statisticsBackendNonNakResponsesFrom Ethernet statistics Dot3StatsInternalMacTransmitErrors Dot3StatsFCSErrorsDot3StatsSingleCollisionFrames Dot3StatsMultipleCollisionFramesInterface statistics Link statistics Internet Protocol IP statisticsPort Rmon statistics FDB statistics Layer 2 statisticsLayer 3 statistics Lacp statisticsArp clear Clrigmp 1- 4095 allGEA Layer 3 statistics GEA Layer 3 statistics menuIP statistics L3 bucket for An IP address DumpARP statistics Route statisticsIcmp statistics DNS statisticsTCP statistics UDP statistics Igmp Multicast Group statistics Command /stats/l3/ospfOspf statistics menu Ospf stats MenuOspf global statistics Nbr change Tx ls UpdatesVrrp statistics Timers KickoffManagement Processor statistics Command /stats/l3/ripRIP statistics Packet statistics10ad41e8/10ad5790 AllocsACL statistics Access Control List ACL statistics menuCPU statistics Snmp statistics Only NTP statistics Uplink Failure Detection statistics Command /stats/dumpStatistics dump Number of times LtM link in BlockingConfiguration Menu Viewing, applying, reverting, and saving changes Saving the configurationViewing pending changes Applying pending changesReminders System configurationLine to end System host log configurationBannr 1-80 characters Host IP addressLog featureall enabledisable Secure Shell Server configurationConsole disableenable Command /cfg/sys/radius Radius server configurationIntrval Sshport TCP port numberTACACS+ server configuration Port TCP port number Telnet enabledisableSystem Snmp configuration NTP server configurationDlight disableenable Command /cfg/sys/ssnmpCharacters SNMPv3 configurationName 1-64 characters V1v2 disableenable User Security Model configurationName 1-32 characters SNMPv3 View configurationTree 1-32 characters Mask 1-32 charactersSNMPv3 Group configuration View-based Access Control Model configurationUsmsnmpv1snmpv2 Level NoAuthNoPrivauthNoDel Deletes the vacmSecurityToGroup entry Cur SNMPv3 Community Table configurationUsmsnmpv1snmpv2 Uname SNMPv3 Target Parameters Table configuration SNMPv3 Target Address Table configurationAddr transport Address ip Port transportSnmpv1snmpv2csnmp Model SNMPv3 Notify Table configurationManagement Networks configuration System Access configurationUseroperadmin Name User Access Control configurationUser ID configuration Access enabledisable Port configurationHttps Access configuration Name 1-64 characters none Temporarily disabling a port Port link configurationPort ACL/QoS configuration Layer 2 configuration802.1x configuration Unauthautoforce-auth 802.1x Global configurationMode force Reauth onoff 802.1x Port configurationRev Mode rstpmstpBridge parameter menu Common Internal Spanning Tree configurationPort parameter menu 4095Cist port configuration Cist bridge configurationEdge disableenable Spanning Tree configurationCost Link autop2psharedBridge Spanning Tree configuration Cur Display current port Spanning Tree parameters Spanning Tree port configurationFastfwd disableenable Forwarding Database configurationStatic FDB configuration MAC address Vlan port Trunk configurationClear mac MAC AddressVLAN 1-4095 Port port numberAll Add port numberLink Aggregation Control Protocol configuration IP Trunk Hash configurationLayer 2 IP Trunk Hash configuration Vlan configuration Lacp Port configurationTimeout shortlong Mode offactivepassiveList of port numbers Layer 3 configurationPort number Mask IP subnet mask IP interface configurationAddr IP address Default Gateway configuration IP Static Route configurationIP Forwarding configuration Address Resolution Protocol configurationNetwork Filter configuration Dirbr disableenableLp 0-4294967294 none Route Map configurationAp AS number AS number AS Autonomous System Path configuration IP Access List configurationMetric 1-4294967294none Action permitdenyRouting Information Protocol configuration RIP Interface configuration RIP Route Redistribution configuration Open Shortest Path First configurationAdd 1-32 1-32all Remove 1-32 1-32allDefault 1-16777215 12none Osfp Area Index configurationMd5key 1-255 characters Redist fixedstaticripAuth nonepasswordmd5 Ospf Summary Range configurationAreaid IP address Type transitstubnssaMask IP address mask Ospf Interface configurationKey key stringnone Mdkey 1-255noneNbr IP address Ospf Virtual Link configurationKey password Ospf Route Redistribution configuration Ospf Host Entry configurationRem 1-32 1-32 ... all Export 1-16777215 12noneOspf MD5 Key configuration Igmp configurationAggr disableenable Igmp snooping configurationFastlv 1-4095 disableenable Srcip IP addressIgmp filtering configuration Igmp static multicast router configurationAdd port number 1-4095 FilterIgmp filter definition Igmp filtering port configurationRange IP multicast address IP Multicast addressDomain Name System configuration Bootstrap Protocol Relay configurationVrrp Virtual Router configuration Virtual Router Redundancy Protocol configurationPreem disableenable Vrrp Virtual Router Group configuration Vrrp Virtual Router Priority Tracking configurationVrs disableenable Ifs disableenableVrrp Virtual Router Group Priority Tracking configuration Passw password Vrrp Interface configurationVrrp Tracking configuration QoS 802.1p configuration Quality of Service configurationAccess Control configuration Egrport port number Access Control List configurationAction permitdenysetprio Stats edACL IP Version 4 Filter configuration ACL Ethernet Filter configurationFlags value 0x0-0x3f ACL TCP/UDP Filter configurationSport 1-65535 port mask ACL Re-mark configuration ACL Meter configurationEnable ed CirACL Re-mark Out-of-Profile configuration ACL Re-mark In-Profile configurationACL Re-mark In-Profile Update User Priority configuration ACL Group configuration Remote Monitoring configurationACL Packet Format configuration Owner 1-127 characters Rmon history configurationIfoid 1-127 characters Rmon alarm configuration Rmon event configurationDescn 1-127 characters Type nonelogtrapbothRlimit -2147483647 to Port mirroring2147483647 Flimit -2147483647 toPort-based port mirroring Uplink Failure Detection configurationAdd mirrored port inoutboth Rem mirrored portLink to Monitor configuration Failure Detection Pair configurationAddport port number Remport port numberLink to Disable configuration Saving the active switch configurationDump Addport port number Remport port numberConfiguration# gtcfg FTP/TFTP server filename Restoring the active switch configurationCommand /cfg/gtcfg FTP/TFTP server filename Operations-level port options Operations MenuOperations-level Vrrp options Reset ReauthOperations-level port 802.1x options Downloading new software to the switch Updating the switch software imageAddress Selecting a software image to runSelecting a configuration block Uploading a software image from the switchBoot Options# ptimg Boot Options# confAccessing the Iscli Resetting the switchBoot Options# reset Boot Options# curMaintenance Menu Forwarding Database options System maintenance optionsFlags new Nvram flags word as 0xXXXXXXXXARP cache options Debugging optionsBroadcastmartian IP Route Manipulation optionsIgmp Multicast Group options Igmp Mrouter options Igmp Snooping optionsClearing dump information Uuencode flash dumpFTP/TFTP system dump put Command /maint/panic Panic commandConfirm dump and reboot y/n y Unscheduled system dumpsIndex

Related manuals

Manual 33 pages 57.51 Kb