Digitus DN-80233, User Manual

Page: 223 / 379

222
9.4.15 match srcip
This command adds to the specified class definition a match condition based on the source IP
address of a packet. The <ipaddr> parameter specifies an IP address. The <
ipmask>
parameter
specifies an IP address bit mask; note that although it resembles a standard subnet mask, this bit
mask need not be contiguous. The optional [
not]
parameter has the effect of negating this match
condition for the class (i.e., match all source IP addresses except for what is specified here).
Default
none
Format match [not] srcip <ipaddr> <ipmask>
Mode Class-Map Config
9.4.16 match srcl4port
This command adds to the specified class definition a match condition based on the source layer 4
port of a packet using a single keyword or numeric notation or a numeric range notation.
To specify the match condition as a single keyword notation, the value for <
portkey>
is one of
the supported port name keywords (listed below).
The currently supported <
portkey>
values are:
domain, echo, ftp, ftpdata, http, smtp, snmp, telnet,
tftp, www
. Each of these translates into its equivalent port number, which is used as both the start
and end of a port range.
To specify the match condition as a numeric value, one layer 4 port number is required. The
portnumber is an integer from 0 to 65535.
To specify the match condition as a range, rwo layer 4 port numbers are required and together
they specify a contiguous port range. Each port number is an integer from 0 to 65535, but with the
added requirement that the second number be equal to or greater than the first. The optional [
not]
parameter has the effect of negating this match condition for the class (i.e., match all source layer
4 ports except for those within the range specified here).
The optional [
not]
parameter has the effect of negating this match condition for the class (i.e.,
match all source layer 4 port numbers except for the one specified here).
Default
None
Format match [not] srcl4port {portkey | <0-65535>} [0-65535]
Mode Class-Map Config
9.4.17 match vlan
This command adds to the specified class definition a match condition based on the value of the
layer 2 VLAN Identifier field (the only tag in a single tagged packet or the first or outer tag of a
double VLAN tagged packet). The VLAN ID is an integer from 1 to 4095. The optional [
not]
parameter has the effect of negating this match condition for the class (i.e., match all VLAN
Identifier values except for what is specified here).
Default None
Format
match [not] vlan <1-4095>