Dell MXL 10GbE - Match

match
Match a sequence number to the transmission control protocol (TCP)/user datagram protocol (UDP)
packets.
Syntax
match seq-num {tcp | udp} {ipv6 | ip} port-num dest-ip dest-
port-num
To remove the match filter for the crypto map, use the no match seq-num
command.
Parameters
seq-num Enter the match command sequence number. The range is
from 0 to 255.
tcp Enter the keyword tcp to configure a TCP access list filter.
udp Enter the keyword udp to configure a UDP access list filter.
ipv6 Enter the source IPv6 address.
ip Enter the source IPv4 address.
port-num Enter the source port number. The range is from 0 to 65535
dest-ip Enter the destination IP address.
dest-port-num Enter the destination port number. The range is from 0 to
65535.
Defaults none
Command
Modes
CONFIG-CRYPTO-POLICY
Command
History
Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
UDP is not supported. Only TCP 23 telnet and 21 FTP are supported.
Example
Dell(conf-crypto-policy)#match 0 tcp a::1 /128 0 a::2 /128 23
Dell(conf-crypto-policy)#match 1 tcp a::1 /128 23 a::2 /128 0
Dell(conf-crypto-policy)#match 2 tcp a::1 /128 0 a::2 /128 21
Dell(conf-crypto-policy)#match 3 tcp a::1 /128 21 a::2 /128 0
Dell(conf-crypto-policy)#match 4 tcp 1.1.1.1 /32 0 1.1.1.2 /32
23
Dell(conf-crypto-policy)#match 5 tcp 1.1.1.1 /32 23
1.1.1.2 /32 0
Dell(conf-crypto-policy)#match 6 tcp 1.1.1.1 /32 0 1.1.1.2 /32
21
Dell(conf-crypto-policy)#match 7 tcp 1.1.1.1 /32 21
1.1.1.2 /32 0
Internet Protocol Security (IPSec)
659