Viewing all ACE protocol entries for an ACL

View all of the ACE protocol entries associated with an ACL.

Procedure

  1. In the navigation tree, expand the following folders: Configuration > Security > Data Path.
  2. Click Advanced Filters (ACE/ACLs).
  3. Click the ACL tab.
  4. Select the appropriate ACL.
  5. Click Proto.

Protocol field descriptions

Use the data in the following table to use the Protocol tab.

Name

Description

AclId

Specifies the ACL ID.

AceId

Specifies the ACE ID.

SrcPort

Specifies the port number or port list to match.

SrcPortOper

Specifies the operator for the ACE protocol source port.

SrcPortOperMaskRange

The value is displayed in hexadecimal format when SrcPortOper is set to mask. When SrcPortOper is set to range, this field is used as the high range value. in this case, the value is displayed in decimal format. When SrcPortOper is set to eq, this field is set to 0.

DstPort

Specifies port number or port list to match.

DstPortOper

Specifies the operator for the ACE protocol destination port.

DstPortOperMaskRange

The value is displayed in hexadecimal format when DstPortOper is set to mask. When DstPortOper is set to range, this field is used as the high range value. In this case, the value is displayed in decimal format. When SrcPortOper is set to eq, this field is set to 0.

IcmpMsgTypeList

Specifies one or a list of ICMP messages to match. The valid range is 0–255 (reserved).

IcmpMsgTypeOper

Specifies the operator for the ACE protocol ICMP message types.

TcpFlagsList

Specifies one or a list of TCP flags to match. The valid range is 0–63.

TcpFlagsOper

Specifies the operator for the ACE protocol TCP flags.

TcpFlagsOperMask

Displays the mask value in hexadecimal format when TcpFlagsOper is set to mask. When TcpFlagsOper is set to eq, this field displays 0x0.