Alcatel-Lucent 7705 SAR, System Management Manual

Page: 96 / 356

Security Command Reference
96 7705 SAR OS System Management Guide
netmask — the dotted-decimal equivalent of the mask length
Values
0.0.0.0 to 255.255.255.255
dst-ip
Syntax dst-ip ipv6-address/prefix-length
no dst-ip
Context config>system>security>cpm-filter>ipv6-filter>entry>match
Description
This command configures a destination IPv6 address range to be used as an IP filter match criterion.
To match on the destination IP address, specify the address and prefix length; for example, 11::12/128.
The no form of the command removes the destination IP address match criterion.
Default
n/a
Parameters
ipv6-address/prefix-length — the IPv6 address on the interface
Values
ipv6-address : x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D
prefix-length 1 to 128
dst-port
Syntax dst-port tcp/udp port-number [ mask ]
no dst-port
Context config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description This command specifies the TCP/UDP port to match the destination port of the packet.
The no form of the command removes the destination port match criterion.
The TCP or UDP protocol must be configured using the match command before this filter can be
configured.
Parameters tcp/udp port-number — the destination port number to be used as a match criterion
Values 0 to 65535 (accepted in decimal, hexadecimal, or binary format)
mask — the 16-bit mask to be applied when matching the destination port