Alcatel-Lucent 7705 SAR - Page 95

Security
7705 SAR OS System Management Guide 95
dscp
Syntax dscp dscp-name
no dscp
Context config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match
criterion.
The no form of the command removes the DSCP match criterion.
Default no dscp
Parameters dscp-name — a DSCP name that has been previously mapped to a value using the dscp-name
command. The DiffServ Code Point may only be specified by its name.
Values be|cp1|cp2|cp3|cp4|cp5|cp6|cp7|cs1|cp9|af11|cp11|
af12|cp13|af13|cp15|cs2|cp17|af21|cp19|af22|cp21|
af23|cp23|cs3|cp25|af31|cp27|af32|cp29|af33|cp31|cs4|
cp33|af41|cp35|af42|cp37|af43|cp39|cs5|cp41|cp42|
cp43|cp44|cp45|ef|cp47|nc1|cp49|cp50|cp51|cp52|cp53|
cp54|cp55|nc2|cp57|cp58|cp59|cp60|cp61|cp62|cp63
dst-ip
Syntax dst-ip {ip-address/mask | ip-address netmask}
no dst-ip
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures a destination IPv4 address range to be used as an IP filter match criterion.
To match on the destination IP address, specify the address and its associated mask; for example,
10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the destination IP address match criterion.
Default no dst-ip
Parameters ip-address — the IP prefix for the IP match criterion in dotted-decimal notation
Values 0.0.0.0 to 255.255.255.255
mask — the subnet mask length expressed as a decimal integer
Values 1 to 32