Alcatel-Lucent 7705 SAR-8 - Page 98

Security Command Reference
Page 98 7705 SAR OS System Management Guide
src-ip
Syntax src-ip {ip-address/mask | ip-address netmask}
no src-ip
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command specifies the IP address to match the source IP address of the packet.
To match on the source IP address, specify the address and its associated mask; for example,
10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the source IP address match criterion.
Default no src-ip
Parameters ip-address — the IP prefix for the IP match criterion in dotted-decimal notation
Values 0.0.0.0 to 255.255.255.255
mask — the subnet mask length expressed as a decimal integer
Values 1 to 32
netmask — the dotted-decimal equivalent of the mask length
Values 0.0.0.0 to 255.255.255.255
src-port
Syntax src-port src-port-number [mask]
no src-port
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command specifies the TCP/UDP port to match the source port of the packet.
Default no src-port
Parameters src-port-number — the source port number to be used as a match criterion
Values 0 to 65535 (accepted in decimal, hexadecimal, or binary format)
mask — the 16-bit mask to be applied when matching the destination port