Filter Policies
7210 SAS D, E OS Router Configuration Guide Page 109
src-ip
Syntax src-ip {ip-address[/mask]} [netmask]
no src-ip
Context config>filter>ip-filter>entry>match
Description This command configures a source IP address range to be used as an IP filter match criterion.
To match on the source IP address, specify the address and its associated mask, e.g. 10.1.0.0/16. The
conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the source IP address match criterion.
Default no src-ip
Parameters ip-address — The IP prefix for the IP match criterion in dotted decimal notation.
Values 0.0.0.0 — 255.255.255.255
mask — The subnet mask length expressed as a decimal integer.
Values 0 — 32
netmask — Any mask epressed in dotted quad notation.
Values 0.0.0.0 — 255.255.255.255
src-port
Syntax src-port {eq} src-port-number
no src-port
Context config>filter>ip-filter>entry>match
Description This command configures a source TCP or UDP port number for an IP filter match criterion. Note
that an entry containing L4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a
fragmented packet since only the first fragment contains the L4 information.
The no form of the command removes the source port match criterion.
Default no src-port
Parameters src-port-number — The source port number to be used as a match criteria expressed as a decimal
integer.
Values 0 — 65535