Media Flow Controller CLI Commands
Media Flow Controller Administrator’s Guide
326
ip filter chain rule arguments
Copyright © 2010, Juniper Networks, Inc.
•
comment <string>
—Specify a comment for the specified rule.
•
dest-addr <IPv4 prefix><IPv4 netmask>
—Match a specific destination address
range.
•
dest-port <port_or_port_range>
—Match a specific destination port or port range.
•
dup-delete
—After adding or modifying the rule, delete all other pre-existing rules that
are duplicates of it. By default, there is no duplicate detection, and creation of duplicates
is freely permitted.
•
in-intf <interface_name>
—Match a specific (single) inbound interface.
•
not-dest-addr <IPv4 prefix><IPv4 netmask>
—Do not match a specific destination
address range.
•
not-dest-port <port_or_port_range>
—Do not match a specific destination port or
port range.
•
not-in-intf <interface_name>
—Do not match a specific inbound interface.
•
not-out-intf <interface_name>
—Do not match a specific outbound interface.
•
not-protocol <protocol>
—Do not match a specific protocol. See protocol target
description, for details.
•
not-source-addr <IPv4 prefix><IPv4 netmask>
—Do not match a specific source
address range
•
not-source-port <port_or_port_range>
—Do not match a specific source port or
port range.
•
out-intf <interface_name>
—Match a specific (single) outbound interface.
•
protocol <protocol>
—Match a specific protocol. The available protocols are tcp, udp,
icmp, and all. Not specifying a protocol is the same as specifying protocol all.
Specifying not-protocol all will not match anything. If tcp or udp are selected for the
protocol, you may specify source and destination ports as well (if icmp is selected, these
options are either ignored, or produce an error.) The source or destination port may each
be either a single number, or a range specified as <low>-<high>; for example, 10-20
would specify ports 10 through 20, inclusive. Only one port or port range may be
specified per type; that is, one for source, and one for destination.
•
source-addr <IPv4 prefix><IPv4 netmask>
—Match a specific source address
range.
•
source-port <port_or_port_range>
—Match a specific source port or port range.
•
state
—Match packets in a particular state. The state criteria has to do with the
classification of the packet relative to existing connections. If there are more than one
state, they should be separated by commas; for example, ESTABLISHED,RELATED. A
packet can be in one of three states:
•
ESTABLISHED
—It is associated with an existing connection which has seen traffic in
both directions.
•
RELATED
—It opens a new connection, but one which is related to an established
connection.
•
NEW
—It opens a new, unrelated connection.
Summary of Contents for MEDIA FLOW CONTROLLER 2.0.4 -
Page 6: ...Media Flow Controller Administrator s Guide VI Copyright 2010 Juniper Networks Inc...
Page 24: ...LIST OF FIGURES XXIV Copyright 2010 Juniper Networks Inc...
Page 37: ...Copyright 2010 Juniper Networks Inc 37 PART 1 Media Flow Controller Administration...
Page 38: ...Media Flow Controller Administrator s Guide 38 Copyright 2010 Juniper Networks Inc...
Page 285: ...Copyright 2010 Juniper Networks Inc 285 PART 2 Media Flow Controller Command and MIB Reference...
Page 286: ...Media Flow Controller Administrator s Guide 286 Copyright 2010 Juniper Networks Inc...
