•
•
•
•
Step Description Command Keys
16 Set number of IP for which the rule
should work (optional).
Applicable only for protocol any value.
esr(config-ips-category-rule)# ip
protocol-id <ID>
<ID> – IP identification number,
takes values of [1..255].
17 Set ICMP CODE value for which the rule
should trigger (optional).
Applicable only for protocol icmp value.
esr(config-ips-category-rule)# ip
icmp code <CODE>
<CODE> – ICMP CODE value,
takes a value in the range
[0..255].
esr(config-ips-category-rule)# ip
icmp code comparison-operator
{ greater-than | less-than }
Comparison operator for ip
icmp code value:
greater-than – greater
than..
less-than – less than..
18 Set ICMP ID value for which the rule
should trigger (optional).
Applicable only for protocol icmp value.
esr(config-ips-category-rule)# ip
icmp id <ID>
<ID> – ICMP ID value, takes a
value in the range [0..65535].
19 Set ICMP Sequence-ID value for which
the rule should trigger (optional).
Applicable only for protocol icmp value.
esr(config-ips-category-rule)# ip
icmp sequence-id <SEQ-ID>
<SEQ-ID> – ICMP Sequence-ID
value, takes a value in the range
[0..4294967295].
20 Set ICMP TYPE value for which the rule
should trigger (optional).
Applicable only for protocol icmp value.
esr(config-ips-category-rule)# ip
icmp type <TYPE>
<TYPE> – ICMP TYPE value,
takes a value in the range
[0..255].
esr(config-ips-category-rule)# ip
icmp type comparison-operator
{ greater-than | less-than }
Comparison operator for ip
icmp type value:
greater-than – greater
than..
less-than – less than..
21 Set TCP Acknowledgement-Number
value for which the rule should trigger
(optional).
Applicable only for protocol tcp value.
esr(config-ips-category-rule)# ip
tcp acknowledgment-number
<ACK-NUM>
<ACK-NUM> – TCP
Acknowledgement-Number
value, takes a value in the range
[0..4294967295].
22 Set TCP Sequence-ID value for which
the rule should trigger (optional).
Applicable only for protocol tcp value.
esr(config-ips-category-rule)# ip
tcp sequence-id <SEQ-ID>
<SEQ-ID> – TCP Sequence-ID
value, takes a value in the range
[0..4294967295].