Filter Policies
7705 SAR OS Router Configuration Guide 377
Protocol The protocol ID for the match criteria. Undefined indicates no protocol
specified. (IPv4 filters only)
Next Header The next header ID for the match criteria. Undefined indicates no next
header is specified. (IPv6 filters only)
ICMP Type The ICMP type match criterion. Undefined indicates no ICMP type is
specified.
Fragment: (IPv4 filters
only)
Off — configures a match on all unfragmented packets
On — configures a match on all fragmented packets
IP-Option Specifies matching packets with a specific IP option or range of IP
options in the IP header for IP filter match criteria (IPv4 filters only)
TCP-syn Off — the SYN bit is disabled
On — the SYN bit is set
Match action Default — the filter does not have an explicit forward or drop match
action specified. If the filter entry ID indicates that the entry is Inactive,
the filter entry is incomplete as no action was specified.
Drop — drop packets matching the filter entry
Forward — forward packets matching the filter entry
Ing. Matches The number of ingress filter matches/hits for the filter entry
Src. Port The source TCP or UDP port number or port range
Dest. Port The destination TCP or UDP port number or port range
Dscp The DSCP name
ICMP Code The ICMP code field in the ICMP header of an IP packet
Option-present: (IPv4
filters only)
Off — does not search for packets that contain the option field or have
an option field of zero
On — matches packets that contain the option field or have an option
field of zero
Multiple Option: (IPv4
filters only)
Off — the option fields are not checked
On — packets containing one or more option fields in the IP header will
be used as IP filter match criteria
Table 48: Show Filter Output Fields (Filter ID Specified) (Continued)
Label Description
To Next Page
Loading...
