3Com MSR 50 Network Router User Manual


  Open as PDF
of 2742
 
2114 CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS
If the protocol argument is set to ICMPv6, you may define the parameters in the
following table.
The following table provides the ICMPv6 messages that you can specify in simple
IPv6 ACL rules.
Table 556 TCP/UDP-specific parameters for simple IPv6 ACL rules
Parameter Function Description
source-port
operator port1
[ port2 ]
Defines a UDP or
TCP source port
against which
UDP or TCP
packets are
matched.
The operator argument can be lt (lower than), gt
(greater than), eq (equal to), and range (inclusive range).
The port1 and port2 arguments each specify a TCP or
UDP port, represented by a number in the range 0 to
65535. TCP port number can be represented in words as
follows:
chargen (19), bgp (179), cmd (514), daytime (13),
discard (9), domain (53), echo (7), exec (512), finger
(79), ftp (21), ftp-data (20), gopher (70), hostname
(101), irc (194), klogin (543), kshell (544), login (513),
lpd (515), nntp (119), pop2 (109), pop3 (110), smtp
(25), sunrpc (111), tacacs (49), talk (517), telnet (23),
time (37), uucp (540), whois (43), or www (80)
UDP port number can be represented in words as
follows: biff (512), bootpc (68), bootps (67),
discard
(9), dns (53), dnsix (90), echo (7), mobilip-ag (434),
mobilip-mn (435), nameserver (42), netbios-dgm
(138), netbios-ns (137), netbios-ssn (139), ntp (123),
rip (520), snmp (161), snmptrap (162), sunrpc (111),
syslog (514), tacacs-ds (65), talk (517), tftp (69), time
(37), who (513), xdmcp (177).
destination-po
rt operator
port1 [ port2 ]
Defines a UDP or
TCP destination
port against
which UDP or
TCP packets are
matched.
tcp-type
{ tcpurg |
tcpack | tcppsh
| tcprst | tcpsyn
| tcpfin }
Defines a TCP
flag.
Available only when the protocol argument is set to TCP.
Table 557 ICMPv6-specific parameters for simple IPv6 ACL rules
Parameter Function Description
icmpv6-type
{ icmpv6-type
icmpv6-code |
icmpv6-message }
Specifies a
ICMPv6
message
type and
code
The icmpv6-type argument ranges from 0 to 255.
The icmpv6-code argument ranges from 0 to 255.
The icmpv6-message argument specifies a message
name. For available ICMPv6 messages, see Table 558.
Table 558 ICMPv6 messages definable in simple IPv4 ACL rules
ICMPv6 message ICMPv6 TYPE ICMPv6 CODE
redirect Type=137 Code=0
echo-request Type=128 Code=0
echo-reply Type=129 Code=0
err-Header-field Type=4 Code=0
frag-time-exceeded Type=3 Code=1
hop-limit-exceeded Type=3 Code=0
host-admin-prohib Type=1 Code=1
host-unreachable Type=1 Code=3