Juniper JUNOSE 11.1.X - COMMAND REFERENCE A TO M 4-9-2010, Справочник по командам

Страница: 797 / 1506

■
sourceQualifier —For UDP or TCP protocols, one of the following protocol-specific
classifier parameters. See Creating or Modifying Classifier Control Lists for IP
Policy Lists for details.
■
portOperator— One of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), ne (not equal), or range (range of port
numbers)
■
range—Single port number or a range of port numbers
■
destinationAddress —Destination address to match
■
destinationMask —Wild-card mask to apply to the destination address
■
destinationHostAddress —Destination host address to match
■
destinationQualifier —One of the following protocol-specific classifier parameters
for destination TCP or UDP ports, ICMP code and type, or IGMP type. The
portOperator and port range are used with TCP and UDP. The icmpType , icmpCode ,
and igmpType parameters are used with ICMP and IGMP.
■
portOperator— one of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), or ne (not equal), or range (range of port
numbers) (TCP and UDP only)
■
range—Single port number or a range of port numbers
■
icmpType —ICMP message type (ICMP only)
■
icmpCode —ICMP message code (ICMP only)
■
igmpType —IGMP message type (IGMP only)
■
tcpQualifier —TCP flags classification parameters
■
tcpFlag —For TCP only; a logic equation that specifies flag bit values; ! means
logical NOT and & means logical AND; use any of the following flag names:
■
ack—0x10
■
fin—0x01
■
push—0x08
■
rst—0x04
■
syn—0x02
■
urgent—0x20
■
ipFlags —Logic equation that specifies flag bit values; ! means logical NOT and
& means logical AND; use any of the following flag names:
■
dont-fragment—0x02
■
more-fragments—0x01
■
reserved—0x04
■
ip-frag-offset—Matches the specified IP fragmentation offset; use any of the
following:
ip classifier-list
■ 755
Chapter 10: I Commands