Alcatel-Lucent 7450 ESS Series, Руководство по настройке, Страница: 427 / 540

Filter Policies
7450 ESS OS Router Configuration Guide Page 427
netmask — Any mask epressed in dotted quad notation.
Values
0.0.0.0 — 255.255.255.255
dst-port
Syntax dst-port { lt | gt | eq } dst-port-number
dst-port range start end
no dst-port
Context config>filter>ip-filter>entry > match
Description
This command configures a destination TCP or UDP port number or port range for an IP filter match
criterion. Note that an entry containing L4 match criteria will not match non-initial (2nd, 3rd, etc)
fragments of a fragmented packet since only the first fragment contains the L4 information.
The no form of the command removes the destination port match criterion.
Default none
Parameters lt | gt | eq — Specifies the operator to use relative to dst-port-number for specifying the port number
match criteria.
lt specifies all port numbers less than dst-port-number match.
gt specifies all port numbers greater than dst-port-number match.
eq specifies that dst-port-number must be an exact match.
eq — Specifies the operator to use relative to dst-port-number for specifying the port number match
criteria. The eq keyword specifies that dst-port-number must be an exact match.
dst-port-number — The destination port number to be used as a match criteria expressed as a decimal
integer.
Values 0 — 65535
range start end — Specifies an inclusive range of port numbers to be used as a match criteria. The
destination port numbers start-port and end-port are expressed as decimal integers.
Values 0 — 65535
fragment
Syntax fragment { true | false }
no fragment
Context config>filter>ip-filter>entry > match
Description Configures fragmented or non-fragmented IP packets as an IP filter match criterion. Note that an
entry containing L4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented
packet since only the first fragment contains the L4 information.
The no form of the command removes the match criterion.