Filter
Top Products
Classifier-Based Software Configuration
Creating a Traffic Class
• host < SA | DA > — Matches only packets from a
specified IPv4 or IPv6 host address. Use this match
criterion when you want to match IP packets from
only one SA/DA.
• SAv4 mask | DAv4 mask
— Matches packets received
from, or destined to, a subnet or a group of IP4
addresses defined by the IPv4 mask. Enter an IPv4
mask in dotted-decimal format for an IPv4 address
(for example, 10.28.31.1 0.0.0.255).
See “Using CIDR Notation for IPv4/IPv6 Addresses”
on page 9-19 for information on how IPv4 mask bit
sets define a match.
Note that an IPv6 address and mask are not
supported as <SAv6 mask> and <DAv6 mask>
match criteria.)
• SAv4/mask-length | DAv4/mask-length
— Matches
packets received from, or destined to, an IPv4
subnet or a group of IPv4 addresses defined by the
mask length. Enter the mask length for an IPv4 SA
or DA mask in CIDR format by using the number
of significant bits. (for example, 10.28.31.3/24).
An IPv4 mask-length is applied to an SA or DA in
a match/ignore statement to define which bits in a
packet’s SA/DA must exactly match the specified
SA/DA and which bits need not match.
For example, 10.28.31.3/24 means that the leftmost
24 bits in an IPv4 source or destination address in
a packet header must match the same bit set in the
specified IPv4 address (in this case, 10.28.3.3).
For more information, see “Using CIDR Notation
for IPv4/IPv6 Addresses” on page 9-19.
An IPv4 mask-length is applied from right to left,
starting from the rightmost bits.
Example: 10.10.10.1/24 and 10.10.10.1 0.0.0.255
both match IPv4 addresses in the range 10.10.10.(1
to 255).
Note: Specifying a group of non-contiguous IP
source addresses may require more than one
match/ignore statement.
9-8