Filter Policies
Router Configuration Guide 555
Parameters true — Specifies matching on all IP packets that contain any IP options in the IP header. A match
will occur for all packets that have any IP option present. An option field of zero is considered
as no option present.
false — Specifies matching on IP packets that do not have any IP option present in the IP header.
(an option field of zero). An option field of zero is considered as no option present.
port
Syntax port {lt | gt | eq} port-number
port port-list port-list-name
port range port-number port-number
no port
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures a TCP/UDP/SCTP source or destination port match criterion in IPv4 and
IPv6 CPM (SCTP not supported) and/or ACL filter policies. A packet matches this criterion if the
packet TCP/UDP/SCTP (as configured by protocol/next-header match) source OR destination port
matches either the specified port value or a port in the specified port range or port-list. .
Operational Note: This command is mutually exclusive with src-port and dst-port commands.
Configuring "port eq 0", may match non-initial fragments where the source/destination port values are
not present in a packet fragment if other match criteria are also met.
The no form of this command deletes the specified port match criterion.
Default no port
Parameters lt | gt | eq — Specifies the operator to use relative to port-number for specifying the port number
match criteria.
lt — Specifies all port numbers less than port-number match.
gt — Specifies all port numbers greater than port-number match.
eq — Specifies that the port-number must be an exact match.
port-number — Specifies a source or destination port to be used as a match criterion. The port
number can be expressed as a decimal integer, as well as in hexadecimal or binary format.
The following value shows a decimal integer only.
Values 0 to 65535
port-list port-list-name — Specifies an inclusive range of source or destination port values to be
used as match criteria..
range port-number port-number — Specifies an inclusive range of source or destination port
values to be used as match criteria..
To Next Page
Loading...
