Alcatel-Lucent 7705 SAR, System Management Manual

Page: 94 / 356

Security Command Reference
94 7705 SAR OS System Management Guide
match
Syntax match [ next-header next-header ]
no match
Context config>system>security>cpm-filter>ipv6-filter>entry
Description
This command enables the context to enter match criteria for the IPv6 filter entry. When the match
criteria have been satisfied, the action associated with the match criteria is executed.
If more than one match criterion (within one match statement) is configured, all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id .
Parameters
next-header — the IPv6 next header to match. This parameter is similar to the protocol parameter
used in IPv4 filter match criteria.
Values
[1 to 42 | 45 to 49 | 52 to 59 | 61 to 255] — (values can be expressed
in decimal, hexadecimal, or binary – DHB)
keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp,
idrp, igmp, igp, ip, ipv6, ipv6-icmp, ipv6-no-nxt, isis, iso-ip, l2tp,
ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp
* — udp/tcp wildcard
123 ptp Performance Transparency Protocol
124 isis ISIS over IPv4
126 crtp Combat Radio Transport Protocol
127 crudp Combat Radio User Datagram
Table 5: IP Protocol IDs and Descriptions (Continued)
Protocol ID Protocol Description