HP Manager Software manual Security ACL Commands

442CHAPTER 12: SECURITY ACL COMMANDS

(For a complete list of TCP and UDP port numbers, see www.iana.org/assignments/port-numbers.)

„destination-ip-addr mask — IP address and wildcard mask of the network or host to which the packet is being sent. Specify both address and mask in dotted decimal notation. For more information, see “Wildcard Masks” on page 26.

„type icmp-type— Filters ICMP messages by type. Specify a value from 0 through 255. (For a list of ICMP message type and code numbers, see www.iana.org/assignments/icmp-parameters.)

„code icmp-code— For ICMP messages filtered by type, additionally filters ICMP messages by code. Specify a value from 0 through 255. (For a list of ICMP message type and code numbers, see www.iana.org/assignments/icmp-parameters.)

„precedence precedence — Filters packets by precedence level. Specify a value from 0 through 7:

„0 — routine precedence

„1 — priority precedence

„2 — immediate precedence

„3 — flash precedence

„4 — flash override precedence

„5 — critical precedence

„6 — internetwork control precedence

„7 — network control precedence

„tos tos — Filters packets by type of service (TOS) level. Specify one of the following values, or any sum of these values up to 15. For example, a tos value of 9 filters packets with the TOS levels minimum delay (8) and minimum monetary cost (1).

„8 — minimum delay

„4 — maximum throughput

„2 — maximum reliability

„1 — minimum monetary cost

„0 — normal

„established — For TCP packets only, applies the ACE only to established TCP sessions and not to new TCP sessions.