N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 137
ACL TCP/UDP Filter configuration
These commands allow you to define TCP/UDP matching criteria for an ACL. The following table describes the
TCP/UDP Filter Configuration commands.
Table 158 TCP/UDP Filter Configuration commands
Command
Description
[no] access-control list
<
ACL number
> tcp-udp source-
port <
1-65535
> [<
port mask
>]
Defines a source port for the ACL. If defined, traffic with the specified TCP or
UDP source port will match this ACL. Specify the port number. Listed below
are some of the well-known ports:
Number Name
20 ftp-data
21 ftp
22 ssh
23 telnet
25 smtp
37 time
42 name
43 whois
53 domain
69 tftp
70 gopher
79 finger
80 http
Command mode:
Global configuration
[no] access-control list
<
ACL number
> tcp-udp
destination-port <
1-65535
>
[<
port mask
>]
Defines a destination port for the ACL. If defined, traffic with the specified TCP
or UDP destination port will match this ACL. Specify the port number, just as
with
source-port
above.
Command mode:
Global configuration
[no] access-control list
<
ACL number
> tcp-udp flags
<
value (0x0-0x3f)
> [
<
mask
>
]
Defines a TCP/UDP flag for the ACL.
Command mode:
Global configuration
default access-control list
<
ACL number
> tcp-udp
Resets the TCP/UDP parameters for the ACL to their default values.
Command mode:
Global configuration
show access-control list
<
ACL number
> tcp-udp
Displays the current TCP/UDP Filtering parameters.
Command mode:
All
ACL Packet Format configuration
The following table describes the Packet Format Configuration commands.
Table 159 Packet Format Configuration commands
Command
Description
[no] access-control list <
ACL
number
> packet-format ethernet
{ethernet-type2|snap|llc}
Defines the Ethernet format for the ACL. The default is none.
Command mode:
Global configuration
[no] access-control list <
ACL
number
> packet-format tagged
Defines the tagging format for the ACL. The default is none.
Command mode:
Global configuration
default access-control list <
ACL
number
> packet-format
Resets Packet Format parameters for the ACL to their default values.
Command mode:
Global configuration
show access-control list <
ACL
number
> packet-format
Displays the current Packet Format parameters for the ACL.
Command mode:
All