Hi,
Those are simply another destination ports - exec stands for port 512 (rsh), cmd stands for port 514 (rcmd). In Cisco IOS, if the port number refers to a well-known service, IOS will replace it with its symbolic name. The line you have quoted says, in numeric:
390 permit tcp host 10.65.17.1 host 10.80.125.162 eq 469 512 514
meaning that any TCP traffic from 10.65.17.1 to 10.80.125.162 where the destination TCP port is 469 or 512 or 514 is permitted.
Note that these port numbers and names are actually listed in the help:
Router(config-ext-nacl)# permit tcp any any eq ?
<0-65535> Port number
bgp Border Gateway Protocol (179)
chargen Character generator (19)
cmd Remote commands (rcmd, 514)
daytime Daytime (13)
discard Discard (9)
domain Domain Name Service (53)
drip Dynamic Routing Information Protocol (3949)
echo Echo (7)
exec Exec (rsh, 512)
finger Finger (79)
ftp File Transfer Protocol (21)
ftp-data FTP data connections (20)
gopher Gopher (70)
hostname NIC hostname server (101)
ident Ident Protocol (113)
irc Internet Relay Chat (194)
klogin Kerberos login (543)
kshell Kerberos shell (544)
login Login (rlogin, 513)
lpd Printer service (515)
nntp Network News Transport Protocol (119)
onep-plain ONEP Cleartext (15001)
onep-tls ONEP TLS (15002)
pim-auto-rp PIM Auto-RP (496)
pop2 Post Office Protocol v2 (109)
pop3 Post Office Protocol v3 (110)
smtp Simple Mail Transport Protocol (25)
sunrpc Sun Remote Procedure Call (111)
tacacs TAC Access Control System (49)
talk Talk (517)
telnet Telnet (23)
time Time (37)
uucp Unix-to-Unix Copy Program (540)
whois Nicname (43)
www World Wide Web (HTTP, 80)
Best regards,
Peter
