System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 111
Parameters true — specifies matching on IP packets that contain more than one option field in the
header
false — specifies matching on IP packets that do not contain multiple option fields in the
header
option-present
Syntax option-present {true | false}
no option-present
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures matching packets that contain the option field or have an option
field of 0 in the IP header as an IP filter match criterion.
The no form of the command removes the checking of the option field in the IP header as a
match criterion.
This command applies to IPv4 filters only.
Parameters true — specifies matching on all IP packets that contain the option field in the header. A
match will occur for all packets that have the option field present. An option field of 0
is considered as no option present.
false — specifies matching on IP packets that do not have any option field present in the
IP header (an option field of 0)
src-ip
Syntax src-ip {ip-address/mask | ip-address ipv4-address-mask}
no src-ip
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command specifies the IPv4 address to match the source IP address of the packet.
To match on the source IP address, specify the address and its associated mask; for
example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of the command removes the source IP address match criterion.
Default no src-ip
Parameters ip-address — the IP prefix for the IP match criterion in dotted-decimal notation
Values 0.0.0.0 to 255.255.255.255
mask — the subnet mask length expressed as a decimal integer
Values 1 to 32
To Next Page
Loading...
