Cisco 4700M Configuration Manual page 33

Chapter 1 Configuring Security Access Control Lists
•
•
•
•
•
•
Table 1-3
Keyword
aol
bgp
chargen
citrix-ica
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
any—Specifies network traffic from any source.
host src_ip_address—Specifies the IP address of the host from which the
network traffic originates. Use this keyword and argument to specify the
network traffic from a single IP address.
src_ip_address netmask—Traffic from a source defined by the IP address and
the network mask. Use these arguments to specify network traffic from a
range of source IP addresses.
object-group net_obj_grp_name—Specifies the identifier of an existing
network object group. For details, see the
with Object Groups" section.
operator—(Optional) Operand used to compare source and destination port
numbers for TCP, TCP-UDP, and UDP protocols. The operators are as
follows:
eq—Equal to.
–
gt—Greater than.
–
lt—Less than.
–
neq—Not equal to.
–
range—An inclusive range of port values. If you enter this operator,
–
enter a second port number value to define the upper limit of the range.
port1 [port2]—TCP or UDP source port name or number from which you
permit or deny services access. Enter an integer from 0 to 65535. To enter an
inclusive range of ports, enter two port numbers. port2 must be greater than
or equal to port1. See
numbers and Table 1-4
numbers.
Well-Known TCP Port Numbers and Keywords
Port Number
5190
179
19
1494
"Simplifying Access Control Lists
Table 1-3 for a list of well-known TCP port names and
for a list of well-known UDP port names and
Description
America-Online
Border Gateway Protocol
Character Generator
Citrix Independent Computing Architecture
Protocol
Configuring ACLs
1-9