Filter Configuration Command Reference
562 Router Configuration Guide
Please see general description related to match-list usage in filter policies.
Default By default no port list is created.
Parameters port-list-name — A string of up to 32 characters of printable ASCII characters. If special
characters are used, the string must be enclosed within double quotes.
port
Syntax [no] port port-number
[no] port range start end
Context config>filter>match-list>port-list
Description This command configures a TCP/UDP/SCTP source or destination port match criterion in IPv4 and
IPv6 CPM (SCTP not supported) and/or ACL filter policies. A packet matches this criterion if the
packet TCP/UDP/SCTP (as configured by protocol/next-header match) source OR destination port
matches either the specified port value or a port in the specified port range or port-list.
Operational notes:
This command is mutually exclusive with src-port and dst-port commands.
Configuring port value of "0", may match non-initial fragments where the source/destination port
values are not present in a packet fragment if other match criteria are also met.
The no form of this command deletes the specified port match criterion.
Default No port is in the list by default.
Parameters port-number — Specifies the port number to add to the list. The port number can be expressed as
a decimal integer, as well as in hexadecimal or binary format. Below shows decimal integer
only..
Values 0 to 65535
range start end — Specifies an inclusive port range between two port numbers values. The start
of the range and end of the range can be expressed as decimal integers, as well as in
hexadecimal or binary format. The following value shows decimal integer only.
Values 0 to 65535
prefix
Syntax prefix ipv6-prefix/prefix-length
no prefix ipv6-prefix/prefix-length
Context config>filter>match-list>ipv6-prefix-list
Description This command adds an IPv6 address prefix to an existing IPv6 address prefix match list.
To Next Page
Loading...
