Security
112
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
ipv4-address-mask — the dotted-decimal equivalent of the mask length
Values 0.0.0.0 to 255.255.255.255
src-ip
Syntax src-ip ipv6-address/prefix-length
no src-ip
Context config>system>security>cpm-filter>ipv6-filter>entry>match
Description This command configures a source IPv6 address range to be used as an IP filter match
criterion.
To match on the source IP address, specify the address and prefix length; for example,
11::12/128.
The no form of the command removes the source IP address match criterion.
Default n/a
Parameters ipv6-address/prefix-length — the IPv6 address on the interface
Values ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D
prefix-length 1 to 128
src-port
Syntax src-port tcp/udp port-number [mask]
no src-port
Context config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description This command specifies the TCP/UDP port to match the source port of the packet.
Default no src-port
Parameters tcp/udp port-number — the source port number to be used as a match criterion
Values [0 to 65535]D
[0x0 to 0xFF]H
[0b0 to 0b1111111111111111]B
mask — the 16-bit mask to be applied when matching the source port