Filter Policies
Router Configuration Guide 559
tcp-syn
Syntax tcp-syn {true | false}
no tcp-syn
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures matching on the SYN bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion. An entry containing Layer 4 non-zero match
criteria will not match non-initial (2nd, 3rd, etc.) fragments of a fragmented packet since only the first
fragment contains the Layer 4 information.
The SYN bit is normally set when the source of the packet wants to initiate a TCP session with the
specified destination IP address.
The no form of the command removes the criterion from the match entry.
Default no tcp-syn
Parameters true — Specifies matching on IP packets that have the SYN bit set in the control bits of the TCP
header.
false — Specifies matching on IP packets that do not have the SYN bit set in the control bits of
the TCP header.
Match List Configuration Commands
match-list
Syntax match-list
Context config>filter
Description This command enables the configuration context for match lists to be used in filter policies (IOM/FP
and CPM).
ip-prefix-list
Syntax ip-prefix-list ip-prefix-list-name [create]
no ip-prefix-list ip-prefix-list-name
Context config>filter>match-list
Description This command creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.
The no form of this command deletes the specified list.
To Next Page
Loading...
