2114 CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS

Table 556 TCP/UDP-specific parameters for simple IPv6 ACL rules

Parameter

Function

Description

 

 

 

source-port

Defines a UDP or

The operator argument can be lt (lower than), gt

operator port1

TCP source port

(greater than), eq (equal to), and range (inclusive range).

[ port2 ]

against which

The port1 and port2 arguments each specify a TCP or

 

UDP or TCP

 

UDP port, represented by a number in the range 0 to

 

packets are

 

65535. TCP port number can be represented in words as

 

matched.

 

follows:

 

 

destination-po

Defines a UDP or

rt operator

TCP destination

port1 [ port2 ]

port against

 

which UDP or

 

TCP packets are

 

matched.

tcp-type

Defines a TCP

{ tcpurg

flag.

tcpack tcppsh

 

tcprst tcpsyn

 

tcpfin }

 

chargen (19), bgp (179), cmd (514), daytime (13), discard (9), domain (53), echo (7), exec (512), finger (79), ftp (21), ftp-data(20), gopher (70), hostname (101), irc (194), klogin (543), kshell (544), login (513), lpd (515), nntp (119), pop2 (109), pop3 (110), smtp (25), sunrpc (111), tacacs (49), talk (517), telnet (23), time (37), uucp (540), whois (43), or www (80)

UDP port number can be represented in words as follows: biff (512), bootpc (68), bootps (67), discard (9), dns (53), dnsix (90), echo (7), mobilip-ag(434), mobilip-mn(435), nameserver (42), netbios-dgm(138), netbios-ns(137), netbios-ssn(139), ntp (123), rip (520), snmp (161), snmptrap (162), sunrpc (111), syslog (514), tacacs-ds(65), talk (517), tftp (69), time (37), who (513), xdmcp (177).

Available only when the protocol argument is set to TCP.

If the protocol argument is set to ICMPv6, you may define the parameters in the following table.

Table 557 ICMPv6-specific parameters for simple IPv6 ACL rules

Parameter

Function

Description

 

 

icmpv6-type

Specifies a The icmpv6-typeargument ranges from 0 to 255.

{ icmpv6-type

ICMPv6

The icmpv6-codeargument ranges from 0 to 255.

icmpv6-code

message

 

icmpv6-message }

type and

The icmpv6-messageargument specifies a message

 

code

name. For available ICMPv6 messages, see Table 558.

 

 

 

The following table provides the ICMPv6 messages that you can specify in simple IPv6 ACL rules.

Table 558 ICMPv6 messages definable in simple IPv4 ACL rules

ICMPv6 message

ICMPv6 TYPE

ICMPv6 CODE

 

 

 

redirect

Type=137

Code=0

echo-request

Type=128

Code=0

echo-reply

Type=129

Code=0

err-Header-field

Type=4

Code=0

frag-time-exceeded

Type=3

Code=1

hop-limit-exceeded

Type=3

Code=0

host-admin-prohib

Type=1

Code=1

host-unreachable

Type=1

Code=3

Page 2114
Image 2114
3Com MSR 30 TCP/UDP-specific parameters for simple IPv6 ACL rules, ICMPv6-specific parameters for simple IPv6 ACL rules