Nokia 7705 - Page 106

Security
106
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
To match on the destination IP address, specify the address and its associated mask; for
example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the destination IP address match criterion.
Default no dst-ip
Parameters ip-address — the IP prefix for the IP match criterion in dotted-decimal notation
Values 0.0.0.0 to 255.255.255.255
mask — the subnet mask length expressed as a decimal integer
Values 1 to 32
ipv4-address-mask — the dotted-decimal equivalent of the mask length
Values 0.0.0.0 to 255.255.255.255
dst-ip
Syntax dst-ip ipv6-address/prefix-length
no dst-ip
Context config>system>security>cpm-filter>ipv6-filter>entry>match
Description This command configures a destination IPv6 address range to be used as an IP filter match
criterion.
To match on the destination IP address, specify the address and prefix length; for example,
11::12/128.
The no form of the command removes the destination IP address match criterion.
Default n/a
Parameters ipv6-address/prefix-length — the IPv6 address on the interface
Values ipv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D
prefix-length 1 to 128
dst-port
Syntax dst-port tcp/udp port-number [mask]
no dst-port
Context config>system>security>cpm-filter>ip-filter>entry>match