CPM Filter Commands
Page 206 7450 ESS System Mangement Guide
Parameters true — Specifies matching on all IP packets that contain the option field in the header. A match will
occur for all packets that have the option field present. An option field of zero is considered as no
option present.
false — Specifies matching on IP packets that do not have any option field present in the IP header
(an option field of zero). An option field of zero is considered as no option present.
src-ip
Syntax src-ip [ip-address/mask | ip-prefix-list prefix-list-name]
no src-ip
Context config>sys>sec>cpm>ip-filter>entry>match
Description This command specifies the IP address to match the source IP address of the packet.
To match on the source IP address, specify the address and its associated mask, such as 10.1.0.0/16.
The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the source IP address match criterion.
Default no src-ip — No source IP match criterion.
Parameters ip-address/mask — Specifies the IP address for the match criterion in dotted decimal notation. An IP
address is written as eight 4-digit (16-bit) hexadecimal numbers separated by colons. One string
of zeros per address can be left out, so that 1010::700:0:217A is the same as
1010:0:0:0:0:700:0:217A.
Values ipv4-address a.b.c.d (host bits must be 0)
x:x:x:x:x:x:d.d.d.d[-interface]
x: [0..FFFF]H
d: [0..255]D
interface: 32 characters maximum, mandatory for link local
addresses
mask: Specifies the 16 bit mask to be applied when matching the source
IP address.
1 — 32
ip-prefix-list — Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter
policies.
ip-prefix-list-name — A string of up to 32 characters of printable ASCII characters. If special charac-
ters are used, the string must be enclosed within double quotes.
Description
src-port
Syntax src-port src-port-number [mask]
To Next Page
Loading...
