Alcatel-Lucent 7705 - Page 297

Filter Policies
7705 SAR OS Router Configuration Guide 297
Example: config>filter>ip-filter>entry# match
config>filter>ip-filter>entry>match# src-ip 10.10.10.10/
32
config>filter>ip-filter>entry>match# dst-ip 10.10.10.91/
24
config>filter>ip-filter>entry>match# exit
The following example displays a matching configuration.
A:ALU-7>config>filter>ip-filter# info
----------------------------------------------
description "filter-main"
scope exclusive
entry 10 create
description "no-91"
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.10/32
exit
action forward
exit
----------------------------------------------
A:ALU-7>config>filter>ip-filter#
Use the following CLI syntax to configure IPv6 filter matching criteria:
CLI Syntax: config>filter>ipv6-filter>entry#
match
dscp dscp-name
dst-ip {ip-address/prefix-length}
dst-port {{lt | gt | eq} dst-port-number} |
{range start end}
icmp-code icmp-code
icmp-type icmp-type
src-ip {ip-address/prefix-length}
src-port {{lt | gt | eq} src-port-number} |
{range start end}
tcp-ack {true | false}
tcp-syn {true | false}
Note: IPv4 filter entries can specify one or more matching criteria, with one caveat. In order
to support the maximum 256 entries for IPv4 filters, any entry that uses source port (src-
port) and/or destination port (dst-port) ranges (lt, gt, or range keywords) as match
criteria must be within the first 64 entries.