"FD 100/320Gbps NT and FX NT IHub System
Basics, Management and OAM Guide"
Security
Issue: 10 3HH-11982-AAAA-TQZZA 67
4.4.2.32 src-port
Table 68 src-port command
4.4.2.33 tcp-ack
Table 69 tcp-ack command
4.4.2.34 tcp-syn
Table 70 tcp-syn command
Item Description
Syntax [no] src-port src-port-number [mask]
Context configure>system>security>cpu-filter>ipv6-filter>entry>match
Description This command configures a source TCP or UDP port number for an IPv6 filter match criterion.
The no form of the command removes the source port match criterion.
Default None
Parameters src-port-number — The source port number to be used as a match criteria expressed as a
decimal, hex or binary integers.
Values: 0 — 65535
mask— Mask used to specify a range of source port numbers as the match criterion.
Item Description
Syntax [no] tcp-ack {true | false}
Context configure>system>security>cpu-filter>ipv6-filter>entry>match
Description This command configures matching on the ACK bit being set or reset in the control bits of the
TCP header of an IP packet as an CPU filter match criterion.
The no form of the command removes the criterion from the match entry.
Parameters true — Specifies matching on IP packets that have the ACK bit set in the control bits of the
TCP header of an IP packet.
false — Specifies matching on IP packets that do not have the ACK bit set in the control bits
of the TCP header of the IP packet.
Item Description
Syntax [no] tcp-syn {true | false}
(1 of 2)