Chapter 7: Quality of Service Commands 659
dstip
dstmask
|any|host
dstip
Specifies a destination IP address and netmask
for match condition of the IP ACL rule.
Specifying any implies specifying
dstip as
0.0.0.0 and
dstmask as 255.255.255.255.
Specifying host A.B.C.D implies
dstip as
A.B.C.D and
dstmask as 0.0.0.0.
[precedence
precedence
| tos
tos
[
tosmask
] | dscp
dscp
]
Specifies the TOS for an IP ACL rule depending
on a match of precedence or DSCP values using
the parameters
dscp, precedence,
tos/tosmask.
tosmask is an optional parameter.
flag [+fin | -fin]
[+syn | -syn] [+rst |
-rst] [+psh | -psh]
[+ack | -ack] [+urg |
-urg] [established]
This option is available only if the protocol is
tcp.
Specifies that the IP ACL rule matches on the
TCP flags.
When +<tcpflagname> is specified, a match
occurs if the specified <tcpflagname> flag is set
in the TCP header.
When -<tcpflagname> is specified, a match
occurs if the specified <tcpflagname> flag is
*NOT* set in the TCP header.
When established is specified, a match occurs if
the specified RST or ACK bits are set in the TCP
header. Two rules are installed in the hardware
when the established option is specified.
Parameter Description