Alcatel-Lucent 7950 SR, System Management Manual

Page: 184 / 462

CPM Filter Commands
Page 184 7950 SR OS System Management Guide
Parameters ip-address/mask — Specifies the IP address for the match criterion in dotted decimal notation. An IP
address is written as eight 4-digit (16-bit) hexadecimal numbers separated by colons. One string
of zeros per address can be left out, so that 1010::700:0:217A is the same as
1010:0:0:0:0:700:0:217A.
Values ipv6-address x:x:x:x:x:x:x:x[-interface]
x:x:x:x:x:x:d.d.d.d[-interface]
x: [0..FFFF]H
d: [0..255]D
interface: 32 characters maximum, mandatory for link local
addresses
mask: Specifies the 16 bit mask to be applied when matching the source
IP address.
1 — 32
ipv6-prefix-list — Creates a list of IPv6 prefixes for match criteria in IPv6 ACL and CPM filter
policies.
ipv6-prefix-list-name — A string of up to 32 characters of printable ASCII characters. If special char-
acters are used, the string must be enclosed within double quotes.
src-port
Syntax src-port src-port-number [ mask ]
Context config>sys>sec>cpm>ip-filter>entry > match
config>sys>sec>cpm>ipv6-filter>entry>match
Description This command specifies the TCP/UDP port to match the source port of the packet. Note that an entry
containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented
packet since only the first fragment contains the Layer 4 information.
Parameters src-port-number — The source port number to be used as a match criteria expressed as a decimal
integer.
Values 0 — 65535
mask — Specifies the 16 bit mask to be applied when matching the source port.
Values 0 — 128
tcp-ack
Syntax tcp-ack { true | false }
no tcp-ack
Context config>sys>sec>cpm>ip-filter>entry > match
config>sys>sec>cpm>ipv6-filter>entry>match
Description This command configures matching on the ACK bit being set or reset in the control bits of the TCP
header of an IP or IPv6 packet as an IP filter match criterion. Note that an entry containing Layer 4