Filter Command Reference
368 7705 SAR OS Router Configuration Guide
protocol-id — configures an IP protocol to be used as a match criterion. The 7705 SAR supports
protocol types TCP, UDP, and ICMP. Common protocol numbers include ICMP (1), TCP (6),
and UDP (17).
Values 0 to 32
direction
Syntax direction {zone-outbound | zone-inbound | both}
Context config>security>policy>entry>match
Description This command sets the direction of the traffic to be matched against the IP criteria. For example, if
zone-inbound is configured, then all inbound traffic to the zone has the match criteria applied to it.
Default both
Parameters zone-outbound — specifies packets that are outbound from the zone
zone-inbound — specifies packets that are inbound to the zone
both — specifies packets that are inbound to and outbound from the zone
dst-ip
Syntax dst-ip ip-address to ip-address
no dst-ip
Context config>security>policy>entry>match
Description This command configures the destination IP address or address range to be used in the matching
criteria of a policy entry. All packets within the specified IP address range are processed for matching
criteria.
The no form of the command removes the destination IP address match criteria.
Default n/a
Parameters ip-address — the IPv4 address to be matched
Values 0.0.0.1 to 255.255.255.255