FS TAP Series, Reference Manual

Page: 64 / 340

TAP Series Switch Command Line Reference
64
by name.
e.g. IP protocol 1 = icmp, 2 = igmp, 6 = tcp, 17
= udp, 47 = gre/nvgre (gre protocol 0x0800 =
gre, 0x6558 = nvgre).
Parameter
“ any ” indicates packets with any IP
protocol can match this rule.
src-port ( range L4_PORT_NUM
L4_PORT_NUM | eq L4_PORT_NUM | gt
L4_PORT_NUM | lt L4_PORT_NUM | any )
Specify the layer 4 source port of the acl rule.
The valid range for L4 source port number is 0
– 65535.
This filed is valid only if the IP protocol is TCP
or UDP.
There are 4 methods to specify the L4 port:
1, eq (equal to)
2, lt (less than)
3, gt (greater than)
4, range
Parameter “ any ” indicates packets with any L4
port can match this rule.
dst-port ( range L4_PORT_NUM
L4_PORT_NUM | eq L4_PORT_NUM | gt
L4_PORT_NUM | lt L4_PORT_NUM | any )
Specify the layer 4 destination port of the acl
rule.
The valid range for L4 destination port number
is 0 – 65535.
This filed is valid only if the IP protocol is TCP
or UDP.
There are 4 methods to specify the L4 port:
1, eq (equal to)
2, lt (less than)
3, gt (greater than)
4, range
Parameter “ any ” indicates packets with any L4
port can match this rule.
src-ip ( IP_ADDR IP_ADDR_WILD | any | host
IP_ADDR )
Specify the source IPv4 address of the acl rule.
Use an IPv4 address and an IPv4 address
wildcard to specify a network (e.g. 192.168.1.1
0.0.0.255). If a bit in wildcard is 0 means this
bit needs to check, otherwise this bit should
be ignored.
Use the parameter
“ host ” and an IPv4 address
to specify an exactly address.
Use the parameter
“ any ” to indicate packets
with any source IPv4 address value can match
this rule.
dst-ip ( IP_ADDR IP_ADDR_WILD | any | host
IP_ADDR )
Specify the destination IPv4 address of the acl
rule.
Use an IPv4 address and an IPv4 address
wildcard to specify a network (e.g. 192.168.1.1
0.0.0.255). If a bit in wildcard is 0 means this