Filter Configuration Command Reference
558 Router Configuration Guide
port-list port-list-name — Specifies to use a list of ports referred to by port-list-name, which is a
string of up to 32 characters of printable ASCII characters. If special characters are used, the
string must be enclosed within double quotes.
range src-port-number src-port-number — Specifies inclusive port range between two src-port-
number values.
src-route-option
Syntax src-route-option {true | false}
no source-route-option
Context config>filter>ip-filter>entry>match
Description This command enables source route option match conditions. When enabled, this filter should match
if a (strict or loose) source route option is present/not present at any location within the IP header, as
per the value of this object. The no form of the command removes the criterion from the match entry.
Default no src-route-option
Parameters true — Enables source route option match conditions.
false — Disables source route option match conditions.
tcp-ack
Syntax tcp-ack {true | false}
no tcp-ack
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures matching on the ACK bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion. An entry containing Layer 4 non-zero match
criteria will not match non-initial (2nd, 3rd, etc.) fragments of a fragmented packet since only the first
fragment contains the Layer 4 information.
The no form of the command removes the criterion from the match entry.
Default no tcp-ack
Parameters true — Specifies matching on IP packets that have the ACK bit set in the control bits of the TCP
header of an IP packet.
false — Specifies matching on IP packets that do not have the ACK bit set in the control bits of
the TCP header of the IP packet.
To Next Page
Loading...
