8-9
Classifier-Based Software Configuration
Traffic Classes
• SAv4/mask-length | DAv4/mask-length — Matches
packets received from, or destined to, an IPv4
subnet or a group of IPv4 addresses defined by the
mask length. Enter the mask length for an IPv4 SA
or DA mask in CIDR format by using the number
of significant bits. (for example, 10.28.31.3/24).
An IPv4 mask-length is applied to an SA or DA in
a match/ignore statement to define which bits in
a packet’s SA/DA must exactly match the specified
SA/DA and which bits need not match.
For example, 10.28.31.3/24 means that the
leftmost 24 bits in an IPv4 source or destination
address in a packet header must match the same
bit set in the specified IPv4 address (in this case,
10.28.3.3).
For more information, see “Using CIDR Notation
for IPv4/IPv6 Addresses” on page 8-20.
An IPv4 mask-length is applied from right to left,
starting from the rightmost bits.
Example: 10.10.10.1/24 and 10.10.10.1
0.0.0.255 both match IPv4 addresses in the range
10.10.10.(1 to 255).
Note: Specifying a group of non-contiguous IP
source addresses may require more than one
match/ignore statement.