Filter Policies
7705 SAR OS Router Configuration Guide 345
match
Syntax match [protocol protocol-id]
no match
Context config>filter>ip-filter>entry
Description This command enables the context to enter match criteria for the IPv4 filter entry. When the match
criteria have been satisfied, the action associated with the match criteria is executed.
If more than one match criterion (within one match statement) is configured, all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id.
Parameters protocol — the protocol keyword configures an IP protocol to be used as an IP filter match
criterion. The protocol type such as TCP or UDP is identified by its respective protocol
number.
protocol-id — configures the decimal value representing the IP protocol to be used as an IP filter
match criterion. Common protocol numbers include ICMP(1), TCP(6), UDP(17). The no
form of the command removes the protocol from the match criteria.
Values 0 to 255 (values can be expressed in decimal, hexadecimal, or
binary – DHB)
keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp,
idrp, igmp, igp, ip, ipv6, ipv6-icmp, ipv6-no-nxt, ipv6-opts,
ipv6-route, isis, iso-ip, l2tp, ospf-igp, pim, pnni, ptp, rdp, rsvp,
stp, tcp, udp, vrrp
* — udp/tcp wildcard
Protocol ID Protocol Description
1 icmp Internet Control Message
2 igmp Internet Group Management
4 ip IP in IP (encapsulation)
6 tcp Transmission Control
8 egp Exterior Gateway Protocol
9 igp Any private interior gateway
17 udp User Datagram
27 rdp Reliable Data Protocol
41 ipv6 IPv6
43 ipv6-route Routing Header for IPv6
45 idrp Inter-Domain Routing Protocol
46 rsvp Reservation Protocol
47 gre General Routing Encapsulation
To Next Page
Loading...
