Cisco 2811扩展ACL

扩展ACL可用协议：

  ahp    Authentication Header Protocol

  eigrp  Cisco's EIGRP routing protocol

  esp    Encapsulation Security Payload

  gre    Cisco's GRE tunneling

  icmp   Internet Control Message Protocol

  ip     Any Internet Protocol

  ospf   OSPF routing protocol

  tcp    Transmission Control Protocol

  udp    User Datagram Protocol

协议icmp可用：

  <0-256>               type-num

  echo                  echo

  echo-reply            echo-reply

  host-unreachable      host-unreachable

  net-unreachable       net-unreachable

  port-unreachable      port-unreachable

  protocol-unreachable  protocol-unreachable

  ttl-exceeded          ttl-exceeded

  unreachable           unreachable

协议ip可用：

  dscp        Match packets with given dscp value

  precedence  Match packets with given precedence value

协议tcp可用：

  <0-65535>  Port number

  ftp        File Transfer Protocol (21)

  pop3       Post Office Protocol v3 (110)

  smtp       Simple Mail Transport Protocol (25)

  telnet     Telnet (23)

  www        World Wide Web (HTTP, 80)

协议udp可用：

  <0-65535>      Port number

  bootpc         Bootstrap Protocol (BOOTP) client (68)

  bootps         Bootstrap Protocol (BOOTP) server (67)

  domain         Domain Name Service (DNS, 53)

  isakmp         Internet Security Association and Key Management Protocol (500)

  non500-isakmp  Internet Security Association and Key Management Protocol (4500)

  snmp           Simple Network Management Protocol (161)

  tftp           Trivial File Transfer Protocol (69)