Dell Force10 TeraScale C Series, Справочное руководство

Страница: 1330 / 1640

1330 | Security
www.dell.com | support.dell.com
seq
e
Assign a sequence number to a deny or permit filter in a trace list while creating the filter.
Syntax seq sequence-number { deny | permit } { ip-protocol-number | ip | tcp | udp } { source mask |
any | host ip-address } { destination mask | any | host ip-address } [ operator port [ port ]]
[ precedence precedence ] [ tos tos-value ] [ count [ byte ] | log ]
To delete a filter, use the no seq sequence-number command.
Parameters
sequence-number Enter a number from 0 to 65535.
deny
Enter the keyword
deny
to configure a filter to drop packets meeting
this condition.
permit
Enter the keyword
permit
to configure a filter to forward packets
meeting this criteria.
ip-protocol-number Enter a number from 0 to 255 to filter based on the protocol identified in
the IP protocol header.
ip
Enter the keyword
ip
to configure a generic IP access list. The keyword
ip
specifies that the access list will permit all IP protocols.
tcp
Enter the keyword
tcp
to configure a TCP access list filter.
udp
Enter the keyword
udp
to configure a UDP access list filter.
source Enter the IP address of the network or host from which the packets were
sent.
mask (OPTIONAL) Enter a network mask in /prefix format (/x).
any
Enter the keyword
any
to specify that all routes are subject to the filter.
host ip-address
Enter the keyword
host
followed by the IP address to specify a host IP
address.
operator
(OPTIONAL) Enter one of the following logical operands:
•
eq
= equal to
•
neq
= not equal to
•
gt
= greater than
•
lt
= less than
•
range
= inclusive range of ports (you must specify two ports for the
port
parameter.)
port port (OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the
range
logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
destination Enter the IP address of the network or host to which the packets are sent.
precedence precedence
Enter the keyword
precedence
followed by a number from 0 to 7 as
the precedence value.
tos tos-value
Enter the keyword
tos
followed by a number from 0 to 15 as the TOS
value.
count
(OPTIONAL) Enter the keyword
count
to count packets processed by
the filter.