Filter
Top Products
Common Configuration Tasks
Page 316 7750 SR OS Router Configuration Guide
IP Entry Matching Criteria
Use the following CLI syntax to configure IP filter matching criteria:
CLI Syntax: config>filter>ip-filter>entry#
match
dscp dscp-name
dst-ip {ip-address/mask|ip-address netmask}
dst-port {{lt|gt|eq} dst-port-number} | {range start end}
fragment {true|false}
icmp-code icmp-code
icmp-type icmp-type
ip-option ip-option-value [ip-option-mask]
multiple-option {true|false}
option-present {true|false}
src-ip {ip-address/mask|ip-address netmask}
src-port {{lt|gt|eq} dst-port-number} | {range start end}
tcp-ack {true|false}
tcp-syn {true|false}
The following displays the command usage to configure IP filter matching criteria:
Example:config>filter>ip-filter>entry# match
config>filter>ip-filter>entry>match# src-ip 10.10.10.103/24
config>filter>ip-filter>entry>match# dst-ip 10.10.10.91/24
config>filter>ip-filter>entry>match# exit
The following displays a matching configuration.
A:ALA-7>config>filter>ip-filter# info
----------------------------------------------
description "filter-main"
scope exclusive
entry 10 create
description "no-91"
filter-sample
interface-disable-sample
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.103/24
exit
action forward redirect-policy redirect1
exit
----------------------------------------------
A:ALA-7>config>filter>ip-filter#