Hitachi GX1000-SMC013X, Instruction Manual

Page: 123 / 452

123
{{
<source ipv4>
| own-address}
<source ipv4 wildcard>
| host
{
<source ipv4>
| own-address} | any | own | range-address
<source ipv4 start> <source ipv4 end>
} {{
<destination ipv4>
|
own-address}
<destination ipv4 wildcard>
| host {
<destination ipv4>
| own-address} | any | own | range-address
<destination ipv4
start> <destination ipv4 end>
} [{[tos
<tos>
] [precedence
<precedence>
] | dscp
<dscp>
}] [fragments] [vlan {
<vlan id>
|
<vlan id list name>
}] [user-priority
<priority>
][{ctag-untagged |
[ctag-user-priority
<priority>
] [ctag-vlan
<vlan id>
]}]
For
mac-ipv6 {
filter-condition
}
:
This filter condition is used to perform flow detection based on MAC header
conditions, IPv6 header conditions, or Layer 4 header conditions.
- When the upper-layer protocol is other than TCP, UDP, and ICMP
mac-ipv6 {
<source mac> <source mac mask>
| host
<source mac>
| any} {
<destination mac> <destination mac mask>
| host
<destination mac>
| any | bpdu | cdp | lacp | lldp | oadp |
pvst-plus-bpdu | slow-protocol} {ipv6 |
<protocol>
} {
<source
ipv6>
/
<length>
| host {
<source ipv6>
| own-address} | any |
own-address
<own address length>
| own | range-address
<source
ipv6 start> <source ipv6 end>
} {
<destination ipv6>
/
<length>
| host
{
<destination ipv6>
| own-address} | any | own-address
<own
address length>
| own | range-address
<destination ipv6 start>
<destination ipv6 end>
} [{traffic-class
<traffic class>
| dscp
<dscp>
}] [vlan {
<vlan id>
|
<vlan id list name>
}] [user-priority
<priority>
][{ctag-untagged | [ctag-user-priority
<priority>
]
[ctag-vlan
<vlan id>
]}]
-
When the upper-layer protocol is TCP
mac-ipv6 {
<source mac> <source mac mask>
| host
<source mac>
| any} {
<destination mac> <destination mac mask>
| host
<destination mac>
| any | bpdu | cdp | lacp | lldp | oadp |
pvst-plus-bpdu | slow-protocol} tcp {
<source ipv6>
/
<length>
|
host {
<source ipv6>
| own-address} | any | own-address
<own
address length>
| own | range-address
<source ipv6 start> <source
ipv6 end>
} [{{eq | neq}
<source port>
| range
<source port start>
<source port end>
}] {
<destination ipv6>
/
<length>
| host
{
<destination ipv6>
| own-address} | any | own-address
<own
address length>
| own | range-address
<destination ipv6 start>
<destination ipv6 end>
} [{{eq | neq}
<destination port>
| range
<destination port start> <destination port end>
}] [{[established] |
[{ack | +ack | -ack}] [{fin | +fin | -fin}] [{psh | +psh |
-psh}] [{rst | +rst | -rst}] [{syn | +syn | -syn}] [{urg |
+urg | -urg}]}] [{traffic-class
<traffic class>
| dscp
<dscp>
}]
[vlan {
<vlan id>
|
<vlan id list name>
}] [user-priority
<priority>
][{ctag-untagged | [ctag-user-priority
<priority>
]
[ctag-vlan
<vlan id>
]}]
-
When the upper-layer protocol is UDP
mac-ipv6 {
<source mac> <source mac mask>
| host
<source mac>
| any} {
<destination mac> <destination mac mask>
| host
<destination mac>
| any | bpdu | cdp | lacp | lldp | oadp |
pvst-plus-bpdu | slow-protocol} udp {
<source ipv6>
/
<length>
|
host {
<source ipv6>
| own-address} | any | own-address
<own
address length>
| own | range-address
<source ipv6 start> <source
ipv6 end>
} [{{eq | neq}
<source port>
| range
<source port start>
<source port end>
}] {
<destination ipv6>
/
<length>
| host
{
<destination ipv6>
| own-address} | any | own-address
<own
address length>
| own | range-address
<destination ipv6 start>
<destination ipv6 end>
} [{{eq | neq}
<destination port>
| range