Alcatel-Lucent OmniAccess 700 CLI, Command Reference Manual

Page: 358 / 931

match-lists (rulesets)
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
325
Alcatel-Lucent
Beta Beta
OmniAccess 700 CLI Command Reference Guide
The following command is used to configure rules for TCP in a match-list.
[< 1-65535 >] tcp { any | host < source ip-address >| interface
< name >| list < name >| prefix <source ip-address/prefix length> }
{ any | host < destination ip-address >| interface <name> | list
< name >| prefix < destination ip-address/prefix length >}
[ ack | dscp {< 0-63 >|< dscp-mnemonics >}| established | fin |
fragment | from < 1-65536 >| ip-precedence {< 0-7 >|< precedence-
mnemonics >}| length { <1-1500> |{ eq | ge | gt | le | lt | range < 1-
1500 >}} | rst | service {< 1-65536 >|< protocol >}| syn | urg | tos { <0-
15> | <tos-mnemonics> }| type { ftp | normal | rpc | sip | tftp }]
The following command is used to configure rules for UDP in a match-list.
[< 1-65535 >] udp { any | host <source ip-address> | interface
<name> | list <name> | prefix <source ip-address/prefix length> }
{ any | host <destination ip-address> | interface <name> | list
<name> | prefix <destination ip-address/prefix length> } [ dscp
{ <0-63> | <dscp-mnemonics> }| fragment | from < 1-65536 >| ip-
precedence { <0-7> | <precedence-mnemonics> }| length { <1-
1500> |{ eq | ge | gt | le | lt | range < 1-1500 >}}| service {< 1-65536 >
|< protocol >}| tos {< 0-15 >|< tos-mnemonics >}| type
{ ftp | normal | rpc | sip | tftp }]
The following command is used to configure rules for ICMP in a match-list.
[< 1-65535 >] icmp { any | host < source ip-address >| interface
< name >| list < name >| prefix < source ip-address/prefix length >}
{ any | host < destination ip-address >| interface < name >| list
< name >| prefix < destination ip-address/prefix length >} [ dscp
{< 0-63 >|< dscp-mnemonics >| fragment | icmp-type < 0-255 > [ icmp-
subtype < 0-255 >]| ip-precedence {< 0-7 >|< precedence-
mnemonics >}| length {< 1-1500 >|{ eq | ge | gt | le | lt | range < 1-
1500 >}}| tos {< 0-15 >|< tos-mnemonics >}]
The following command is used to configure rules using the protocol
numbers .
[< 1-65535 >] protocol < 1-65535 > { any | host <source ip-address>
| interface < name > | list < name >| prefix < source ip-address/
prefix length >} { any | host < destination ip-address >| interface
< name >| list < name >| prefix < destination ip-address/prefix
length >} [ dscp {< 0-63 >|< dscp-mnemonics >| fragment | ip-
precedence {< 0-7 >|< precedence-mnemonics >} | length {< 1-1500 >
|{ eq | ge | gt | le | lt | range < 1-1500 >}} | tos {< 0-15 >|< tos-
mnemonics >}| type { ftp | normal | rpc | sip | tftp }]