Security
76
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
—no dst-ip
— dst-port tcp/udp port-number [mask]
—no dst-port
— fragment {true | false}
—no fragment
— icmp-code icmp-code
—no icmp-code
— icmp-type icmp-type
—no icmp-type
— ip-option ip-option-value [ip-option-mask]
—no ip-option
— multiple-option {true | false}
—no multiple-option
— option-present {true | false}
—no option-present
— src-ip {ip-address/mask | ip-address
ipv4-address-mask}
—no src-ip
— src-port tcp/udp port-number [mask]
—no src-port
— tcp-ack {true | false}
—no tcp-ack
— tcp-syn {true |
false}
—no tcp-syn
— renum old-entry-id new-entry-id
— [no] shutdown
3.10.1.1.5 IPv6 CPM Filter Commands
config
— system
— security
— [no] cpm-filter
— default-action {accept | drop}
— ipv6-filter
— entry entry-id [create]
—no entry entry-id
— action {accept | drop}
—no action
— description description-string
—no description
— log log-id
—no log
— match [next-header next-header]
—no match
— dscp dscp-name
—no dscp
— dst-ip ipv6-address/prefix-length
—no dst-ip
— dst-port tcp/udp port-number [mask]
—no dst-port