NetBuddy.Org论坛 - 如何翻译access-list 100 permit tcp any any established?


	欢迎访客 ( 登陆 \| 注册 )

NetBuddy.Org论坛 ->技术论坛 ->网络世界

如何翻译access-list 100 permit tcp any any established?

« 上一篇主题 | 下一篇主题 »

跟踪主题 | 邮寄主题 | 打印主题

bstone

1. 如何翻译access-list 100 permit tcp any any established?

HP : 94 / 943

MP : 754 / 15486

EXP : 75%

重定向中

成员等级: 38
发表总数: 2263
金币总数: 679
所属组别: 核心成员
注册日期: 2003/05/31

配一个华为eudemon100防火墙，找到了一个cisco的案例，准备照抄上去，有如下语句：

access-list 100 permit icmp any 202.0.0.0 0.0.0.15
access-list 100 permit tcp any 202.0.0.0 0.0.0.15 established
access-list 100 permit tcp any 202.0.0.0 0.0.0.15 gt 1023
access-list 100 permit udp any 202.0.0.0 0.0.0.15 gt 1023
access-list 100 permit tcp any 202.0.0.1 0.0.0.0 eq domain
access-list 100 permit udp any 202.0.0.1 0.0.0.0 eq domain
access-list 100 permit tcp any 202.0.0.2 0.0.0.0 eq domain
access-list 100 permit udp any 202.0.0.2 0.0.0.0 eq domain
access-list 100 permit tcp any 202.0.0.1 0.0.0.0 eq smtp
access-list 100 permit tcp any 202.0.0.1 0.0.0.0 eq pop3
access-list 100 permit tcp any 202.0.0.2 0.0.0.0 eq www
access-list 100 deny tcp any 202.0.0.0 0.0.0.15 eq 2049 log
access-list 100 deny udp any 202.0.0.0 0.0.0.15 eq 2049 log
access-list 100 deny tcp any 202.0.0.0 0.0.0.15 eq 6000 log
access-list 100 deny ip any any log

其中有一句access-list 100 permit tcp any 202.0.0.0 0.0.0.15 established 执行不了？有如下提示：
eudemon(config)#access-list 100 permit tcp any any ?
eq Match only packets on a given port number
fragments Check non-initial fragments
gt Match only packets with a greater port number
log Log matches against this entry
lt Match only packets with a lower port number
neq Match only packets not on a given port number
precedence Match packets with defined precedence
range Match only packets in the range of port numbers
time-range Match packets comes in a defined timerange
tos Match packets with defined tos

没有established这一项，请问如何翻译？