Avaya G430, Руководство пользователя

Страница: 572 / 696

• To apply the rule to all ports with a name or number greater than the specified
name or number, type
gt
(greater than) followed by a port name or port
number.
• To apply the rule to all ports with a name or number less than the specified
name or number, type
lt
(less than) followed by a port name or port
number.
• To apply the rule to all port names and port numbers, type
any
Use the
no
form of the appropriate command to specify that the rule does not
apply to the ports defined by the command.
Example
The following command specifies a source TCP port named “telnet” for rule 1 in access control
list 301:
Gxxx-001(ACL 301/ip rule 1)# tcp source-port eq telnet
The following command specifies any destination UDP port less than 1024 for rule 3 in QoS
list 404:
Gxxx-001(QoS 404/rule 3)# udp destination-port lt 1024
The following command specifies any destination TCP port in the range 5000 through 5010
for rule 1 in access control list 301:
Gxxx-001(ACL 301/ip rule 1)# tcp destination-port range 5000 5010
The following command specifies any source TCP port except a port named “http” for rule 7
in access control list 304:
Gxxx-001(ACL 304/ip rule 7)# no tcp source-port eq http
Applying the rule to ICMP type and code
Procedure
1. To apply the rule to a specific type of ICMP packet, use the
icmp
command.
This command sets the IP protocol parameter to ICMP, and specifies an ICMP type
and code to which the rule applies. You can specify the ICMP type and code by
integer or text string, as shown in the examples below.
2. To apply the rule to all ICMP packets except the specified type and code, enter
no
icmp
Example
For example, the following command specifies an ICMP echo reply packet for rule 1 in QoS
list 401:
Gxxx-001(QoS 401/rule 1)# icmp Echo-Reply
Policy lists
572 Administering Avaya G430 Branch Gateway October 2013
Comments? infodev@avaya.com