System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 105
[0b0..0b101010 | 0b101101..0b110001 | 0b110100..0b111011 |
0b111101..0b11111111]B
protocol-name — the IPv6 next header to match, expressed as a protocol name. This
parameter is similar to the protocol parameter used in IPv4 filter match criteria. See
Table 6 for the protocol IDs and descriptions for the IP protocols.
Values none, icmp, igmp, ip, tcp, egp, igp, udp, rdp, ipv6, idrp, rsvp, gre,
ipv6-icmp, ipv6-no-nxt, iso-ip, eigrp, ospf-igp, ether-ip, encap, pnni,
pim, vrrp, l2tp, stp, ptp, isis, crtp, crudp, sctp, mpls-in-ip,
* - udp/tcp wildcard
dscp
Syntax dscp dscp-name
no dscp
Context config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter
match criterion.
The no form of the command removes the DSCP match criterion.
Default no dscp
Parameters dscp-name — a DSCP name that has been previously mapped to a value using the
dscp-name command. The DiffServ Code Point may only be specified by its name.
Values be|cp1|cp2|cp3|cp4|cp5|cp6|cp7|cs1|cp9|af11|cp11|
af12|cp13|af13|cp15|cs2|cp17|af21|cp19|af22|cp21|
af23|cp23|cs3|cp25|af31|cp27|af32|cp29|af33|cp31|cs4|
cp33|af41|cp35|af42|cp37|af43|cp39|cs5|cp41|cp42|
cp43|cp44|cp45|ef|cp47|nc1|cp49|cp50|cp51|cp52|cp53|
cp54|cp55|nc2|cp57|cp58|cp59|cp60|cp61|cp62|cp63
dst-ip
Syntax dst-ip {ip-address/mask | ip-address ipv4-address-mask}
no dst-ip
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures a destination IPv4 address range to be used as an IP filter match
criterion.