Chapter 4 Service Configuration
port-mask
>][
dscp
<
0-63
>][
fragment
][
cos
<
0-7
>][<
vlan-id
>[<
vlan-mask
>]][<
source-mac
><
sma
c-mask
>|
any
][<
dest-mac
><
dmac-mask
>|
any
]
Parameter Description
Parameter
Description
<
1-16
>
Global rule number.
permit
If the condition matches, access is permitted.
deny
If the condition matches, access is denied.
<
1-28
>
Binds the global rule to a port. Different devices have different
port number ranges. In the syntax, the 5250-28TC device is used
as an example.
any
(first)
Binds the global rule to all ports.
tcp
This rule only matches TCP packet. The non-TCP packet ignores
this rule.
<
source-ipaddr
>
This rule only matches IP packet. The non-IP packet ignores this
rule.
<
sip-mask
>
Source mask used for sources. It is a 32-bit IP address expressed
in dotted decimal notation.
source-port
<
0-65535
>
TCP source port number of the transmitted packet.
The source-port parameter resolve some known port number.
Also the port number and mask can be entered.
<
sport-mask
>
Source port mask.
any
(second)
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
<
destination-ipaddr
>
Destination network or host of the transmitted packet. It is a 32-bit
IP address expressed in dotted decimal notation.
<
dip-mask
>
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
any
(third)
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0.
dest-port
<
0-65535
>
TCP destination port number of the transmitted packet
The dest-port parameter resolve some known port number. Also
the port number and mask can be entered.
<
dport-mask
>
Destination port mask.
dscp
<
0-63
>
This rule is only valid for the message with the specified DSCP
value. Ignore this rule for other messages. The range of DSCP
value is 0 to 63.
4-253
SJ-20131111172707-003|2013-11-27 (R1.0)
ZTE Proprietary and Confidential