IP Protocol Numbers

From vendor documentation

Every assigned IANA IP protocol number with its registry keyword and RFC — ICMP 1, TCP 6, UDP 17, GRE 47, ESP 50, OSPF 89, VRRP 112 — plus a bulk mode that names a pasted list of numbers.

Input

Mode

A number is matched exactly. “icmpv6”, “6in4”, “gre”, “ospf” and “RFC 8200” all work, as do the natural spellings the IANA keywords miss.

Protocol number, not a port

These values go in the IPv4 Protocol field and the IPv6 Next Header field. OSPF, EIGRP, VRRP and GRE have no port at all, so an ACL has to match the protocol number — the port table will not help. Numbers 144–252 are unassigned and are deliberately absent rather than guessed at.

Assigned protocol numbers

140 of 140 rows

OverheadCopy
0HOPOPTIPv6 Hop-by-Hop OptionRFC 8200—
1ICMPInternet Control MessageRFC 792—
2IGMPInternet Group ManagementRFC 1112—
3GGPGateway-to-Gateway ProtocolRFC 823—
4IPv4IPv4 encapsulationRFC 2003sizes →
5STStreamRFC 1190—
6TCPTransmission ControlRFC 9293—
7CBTCore Based TreesRFC 2189—
8EGPExterior Gateway ProtocolRFC 888—
9IGPAny private interior gateway (Cisco IGRP)RFC 1700—
10BBN-RCC-MONBBN RCC Monitoring——
11NVP-IINetwork Voice ProtocolRFC 741—
12PUPPARC Universal Packet——
13ARGUSARGUS——
14EMCONEMCON——
15XNETCross Net Debugger——
16CHAOSChaos——
17UDPUser DatagramRFC 768—
18MUXMultiplexing——
19DCN-MEASDCN Measurement Subsystems——
20HMPHost MonitoringRFC 869—
21PRMPacket Radio Measurement——
22XNS-IDPXEROX NS IDP——
23TRUNK-1Trunk-1——
24TRUNK-2Trunk-2——
25LEAF-1Leaf-1——
26LEAF-2Leaf-2——
27RDPReliable Data ProtocolRFC 908—
28IRTPInternet Reliable TransactionRFC 938—
29ISO-TP4ISO Transport Protocol Class 4RFC 905—
30NETBLTBulk Data Transfer ProtocolRFC 998—
31MFE-NSPMFE Network Services Protocol——
32MERIT-INPMERIT Internodal Protocol——
33DCCPDatagram Congestion Control ProtocolRFC 4340—
343PCThird Party Connect Protocol——
35IDPRInter-Domain Policy Routing ProtocolRFC 1479—
36XTPXTP——
37DDPDatagram Delivery Protocol——
38IDPR-CMTPIDPR Control Message Transport Protocol——
39TP++TP++ Transport Protocol——
40ILIL Transport Protocol——
41IPv6IPv6 encapsulationRFC 2473sizes →
42SDRPSource Demand Routing ProtocolRFC 1940—
43IPv6-RouteRouting Header for IPv6RFC 8200—
44IPv6-FragFragment Header for IPv6RFC 8200—
45IDRPInter-Domain Routing Protocol——
46RSVPResource Reservation ProtocolRFC 2205—
47GREGeneric Routing EncapsulationRFC 2784sizes →
48DSRDynamic Source Routing ProtocolRFC 4728—
49BNABNA——
50ESPEncap Security PayloadRFC 4303sizes →
51AHAuthentication HeaderRFC 4302sizes →
52I-NLSPIntegrated Net Layer Security TUBA——
53SWIPEIP with Encryption (SWIPE)——
54NARPNBMA Address Resolution ProtocolRFC 1735—
55MOBILEIP Mobility (Min Encap)——
56TLSPTransport Layer Security Protocol (Kryptonet key management)——
57SKIPSimple Key-Management for Internet Protocol——
58IPv6-ICMPICMP for IPv6RFC 4443—
59IPv6-NoNxtNo Next Header for IPv6RFC 8200—
60IPv6-OptsDestination Options for IPv6RFC 8200—
62CFTPCFTP——
64SAT-EXPAKSATNET and Backroom EXPAK——
65KRYPTOLANKryptolan——
66RVDMIT Remote Virtual Disk Protocol——
67IPPCInternet Pluribus Packet Core——
69SAT-MONSATNET Monitoring——
70VISAVISA Protocol——
71IPCVInternet Packet Core Utility——
72CPNXComputer Protocol Network Executive——
73CPHBComputer Protocol Heart Beat——
74WSNWang Span Network——
75PVPPacket Video Protocol——
76BR-SAT-MONBackroom SATNET Monitoring——
77SUN-NDSUN ND PROTOCOL-Temporary——
78WB-MONWIDEBAND Monitoring——
79WB-EXPAKWIDEBAND EXPAK——
80ISO-IPISO Internet Protocol——
81VMTPVMTP——
82SECURE-VMTPSECURE-VMTP——
83VINESVINES——
85NSFNET-IGPNSFNET-IGP——
86DGPDissimilar Gateway Protocol——
87TCFTCF——
88EIGRPEnhanced Interior Gateway Routing ProtocolRFC 7868—
89OSPFIGPOpen Shortest Path FirstRFC 2328—
90Sprite-RPCSprite RPC Protocol——
91LARPLocus Address Resolution Protocol——
92MTPMulticast Transport Protocol——
93AX.25AX.25 Frames——
94IPIPIP-within-IP Encapsulation ProtocolRFC 2003sizes →
95MICPMobile Internetworking Control Protocol——
96SCC-SPSemaphore Communications Security Protocol——
97ETHERIPEthernet-within-IP EncapsulationRFC 3378sizes →
98ENCAPEncapsulation HeaderRFC 1241—
100GMTPGMTP——
101IFMPIpsilon Flow Management Protocol——
102PNNIPNNI over IP——
103PIMProtocol Independent MulticastRFC 7761—
104ARISARIS——
105SCPSSCPS——
106QNXQNX——
107A/NActive Networks——
108IPCompIP Payload Compression ProtocolRFC 3173sizes →
109SNPSitara Networks Protocol——
110Compaq-PeerCompaq Peer Protocol——
111IPX-in-IPIPX in IP——
112VRRPVirtual Router Redundancy ProtocolRFC 5798—
113PGMPGM Reliable Transport ProtocolRFC 3208—
115L2TPLayer Two Tunneling ProtocolRFC 3931sizes →
116DDXD-II Data Exchange——
117IATPInteractive Agent Transfer Protocol——
118STPSchedule Transfer Protocol——
119SRPSpectraLink Radio Protocol——
120UTIUTI——
121SMPSimple Message Protocol——
123PTPPerformance Transparency Protocol——
124ISISISIS over IPv4——
125FIREFIRE——
126CRTPCombat Radio Transport Protocol——
127CRUDPCombat Radio User Datagram——
128SSCOPMCESSCOPMCE——
129IPLTIPLT——
130SPSSecure Packet Shield——
131PIPEPrivate IP Encapsulation within IP——
132SCTPStream Control Transmission ProtocolRFC 4960—
133FCFibre Channel——
134RSVP-E2E-IGNORERSVP-E2E-IGNORERFC 3175—
135Mobility HeaderMobility HeaderRFC 6275—
136UDPLiteUDPLiteRFC 3828—
137MPLS-in-IPMPLS-in-IPRFC 4023sizes →
138manetMANET ProtocolsRFC 5498—
139HIPHost Identity ProtocolRFC 7401—
140Shim6Shim6 ProtocolRFC 5533—
141WESPWrapped Encapsulating Security PayloadRFC 5840—
142ROHCRobust Header CompressionRFC 5856—
143EthernetEthernet encapsulationRFC 8986sizes →
253Use for experimentation and testingUse for experimentation and testingRFC 3692—
254Use for experimentation and testingUse for experimentation and testingRFC 3692—
255ReservedReserved——

Frequently asked

What protocol number does GRE use?
GRE is IP protocol 47 (RFC 2784). It is a protocol number rather than a port, so it appears in the IPv4 Protocol field and the IPv6 Next Header field, and a firewall ACL has to match the protocol number instead of a port.
Why is OSPF 89 and not a port number?
OSPF runs directly on IP rather than on TCP or UDP, so it is identified by protocol number 89 (RFC 2328). There is nothing to filter by port: use an ACL that matches IP protocol 89.
My firewall log says "protocol 47" — what is that?
Protocol 47 is GRE, used by PPTP and by GRE tunnels. Because GRE carries no ports and no session state, most firewalls also need an explicit permit for the tunnel endpoints before the tunnel will come up.
What is protocol 0, HOPOPT?
Zero is the IPv6 Hop-by-Hop Options header, a header extension rather than a transport protocol (RFC 8200). When present it must come immediately after the IPv6 header, and routers along the path have to process it.
Why are 144 to 252 missing from the table?
Those numbers are unassigned in the IANA registry. Printing names for them would be fabrication, so they are absent. Numbers 253 and 254 are reserved for experimentation and testing (RFC 3692), and 255 is reserved.

Next