Filter Policies
7705 SAR OS Router Configuration Guide 357
src-port
Syntax src-port {lt | gt | eq} src-port-number 
src-port range start end 
no src-port
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures a source TCP or UDP port number or port range for an IP filter match 
criterion.
The no form of the command removes the source port match criterion. 
Default no src-port
Parameters lt | gt | eq — use relative to src-port-number for specifying the port number match criteria:
lt specifies that all port numbers less than src-port-number match
gt specifies that all port numbers greater than src-port-number match
eq specifies that src-port-number must be an exact match
src-port-number — the source port number to be used as a match criteria expressed as a decimal 
integer
Values 1 to 65535
start end — specifies an inclusive range of port numbers to be used as a match criteria. The 
destination port numbers start and end are expressed as decimal integers.
Values 1 to 65535
tcp-ack
Syntax tcp-ack {true | false}
no tcp-ack
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures matching on the ACK bit being set or reset in the control bits of the TCP 
header of an IP packet as an IP filter match criterion.
The no form of the command removes the criterion from the match entry.
Default no tcp-ack
Parameters true — specifies matching on IP packets that have the ACK bit set in the control bits of the TCP 
header of an IP packet
false — specifies matching on IP packets that do not have the ACK bit set in the control bits of 
the TCP header of the IP packet