Filter Policies
Router Configuration Guide 549
x: [0..FFFF]H
d: [0..255]D
prefix-length — The IPv6 prefix length for the specified ipv6-address expressed as a decimal
integer.
Values 1 to 128
ipv6-address-mask — Eight 16-bit hexadecimal pieces representing bit match criteria.
Values x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0..FFFF]H
d: [0..255]D
dst-port
Syntax dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range dst-port-number dst-port-number
no dst-port
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures a destination TCP, UDP, or SCTP port number or port range for an IP filter
match criterion. An entry containing Layer 4 non-zero match criteria will not match non-initial (2nd,
3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4
information. Similarly an entry containing "dst-port eq 0" match criterion, may match non-initial
fragments when the destination port value is not present in a packet fragment and other match criteria
are also met.
The no form of the command removes the destination port match criterion.
Default no dst-port
Parameters lt | gt | eq — Specifies the operator to use relative to dst-port-number for specifying the port
number match criteria.
lt specifies all port numbers less than dst-port-number match.
gt specifies all port numbers greater than dst-port-number match.
eq specifies that dst-port-number must be an exact match.
dst-port-number — The destination port number to be used as a match criteria expressed as a
decimal integer, as well as in hexadecimal or binary format. The following value is for
decimal integer format only.
Values 0 to 65535
To Next Page
Loading...
