ruleExtendedProtocol

Extended acl config for other protocol.
The format is P:RULE.
P means protocol value,
P is IC,known as icmp(1) protocol,
  the format of RULE is X-A.B.C.D/N-A.B.C.D/N-IC-C-D-F;
P is I,known as ip protocol,
  the format of RULE is X-A.B.C.D/N-A.B.C.D/N-D-F;
P is T,known as tcp(6) protocol,
  the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-E-D-F;
P is U,known as udp(17) protocol,
  the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-D-F;
P is A,known as arp protocol,
  the format of RULE is X-A.B.C.D/N-A.B.C.D/N;
P is 0-255(except 1,6 and 17),known as protocol id 0-255(except 1,6 and 17),
  the format of RULE is X-A.B.C.D/N-A.B.C.D/N-D-F;
If P is 1(ICMP),the format of RULE is X-A.B.C.D/N-A.B.C.D/N-IC-C-D-F; 
If P is 6(TCP),the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-E-D-F;
If P is 17(UDP),the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-D-F;
Here 
X is 1:deny;2:permit;
the first A.B.C.D/N is source ip and mask.if 'x' means any; 
the second A.B.C.D/N is destination ip and mask.if 'x' means any;
IC takes the value of 0-255;
0 means no icmp message type set; 
1-255 means icmp message type (0-254) set ;
C takes the value of 0-255;
0 means no icmp code type set; 
1-255 means icmp code type (0-254) set ; 
E: 0 means tcp connectiong mode set;
1 means establishing set;2 means established set;   
S takes the format of P*Q,P:
0: no source port set,Q is also 0;
1-65536: source port 0-65535 ,same scope for Q.
DE takes the format of P*Q,P:
0: no destination port set,Q is also 0;
1-65536: destination port 0-65535 ,same scope for Q.                                                                                          
D takes the value of 0-64;
0 means no dscp value set; 
1-64 means dscp value (0-63) set ; 
F : 0 means no fragment set;1 means fragment set.

MIB

Es2952-MIB

OID

.1.3.6.1.4.1.3902.15.2.11.17.3.1.4

Type

column

Access

readwrite

Status

current

Parent

extendedAclEntry