host
ip-address
} {
destination mask
| any | host
ip-address
}
[
operator
]
command.
Parameters
ip-address
Enter the IP address of the forwarding router.
slot/port
Enter the keyword
slot / port
followed by the slot/port
information.
ip-protocol-
number
Enter a number from 0 to 255 for the protocol identified in
the IP protocol header.
protocol-type
Enter one of the following keywords as the protocol type:
•
icmp
for internet control message protocol
•
ip
for any internet protocol
•
tcp
for transmission control protocol
•
udp
for user datagram protocol
bit
(OPTIONAL) For the TCP protocol type only, enter one or a
combination of the following TCP flags:
•
ack
= acknowledgement
•
fin
= finish (no more data from the user)
•
psh
= push function
•
rst
= reset the connection
•
syn
= synchronize sequence number
•
urg
= urgent field
source
Enter the IP address of the network or host from which the
packets were sent.
mask
Enter a network mask in /prefix format (/x).
any
Enter the keyword
any
to specify that all traffic is subject to
the filter.
host
ip-address
Enter the keyword
host
then the IP address to specify a host
IP address.
destination
Enter the IP address of the network or host to which the
packets are sent.
operator
(OPTIONAL) For TCP and UDP parameters only. Enter one of
the following logical operand:
•
eq
= equal to
•
neq
= not equal to
•
gt
= greater than
•
lt
= less than
•
range
= inclusive range of ports (you must specify two
ports for the
port
command parameter.)
1008
Policy-based Routing (PBR)
