Juniper JUNOSE 11.1.X - COMMAND REFERENCE N TO Z 4-6-2010, Command Reference Manual

Page: 477 / 1488

■
any—Matches any source or destination address
■
sourceQualifier —For UDP or TCP protocols, one of the following protocol-specific
classifier parameters. See Creating or Modifying Classifier Control Lists for IP Policy
Lists in the JUNOSe Policy Management Configuration Guide , for details.
■
portOperator —One of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), ne (not equal), or range (range of port
numbers)
■
range—Single port number or a range of port numbers
■
destinationAddress —Destination address to match
■
destinationMask —Wild-card mask to apply to the destination address
■
destinationHostAddress —Destination host address to match
■
destinationQualifier —One of the following protocol-specific classifier parameters
for destination TCP or UDP ports, ICMP code and type, or IGMP type. The
portOperator and port range are used with TCP and UDP. The icmpType , icmpCode ,
and igmpType parameters are used with ICMP and IGMP.
■
portOperator —one of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), or ne (not equal), or range (range of port
numbers) (TCP and UDP only)
■
range—Single port number or a range of port numbers
■
icmpType —ICMP message type (ICMP only)
■
icmpCode —ICMP message code (ICMP only)
■
igmpType —IGMP message type (IGMP only)
■
tcpQualifier —TCP flags classification parameters
■
tcpFlag —For TCP only; a logic equation that specifies flag bit values; ! means
logical NOT and & means logical AND; use any of the following flag names:
■
ack—0x10
■
fin—0x01
■
push—0x08
■
rst—0x04
■
syn—0x02
■
urgent—0x20
■
ipFlags —Logic equation that specifies flag bit values; ! means logical NOT and
& means logical AND; use any of the following flag names:
■
dont-fragment—0x02
■
more-fragments—0x01
■
reserved—0x04
secure ipv6 classifier-list
■ 435
Chapter 7: S Commands