Alcatel-Lucent 7450 System Management Manual page 207

Context config>sys>sec>cpm>ip-filter>entry>match
Description This command specifies the TCP/UDP port to match the source port of the packet. Note that an entry
containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented
packet since only the first fragment contains the Layer 4 information.
Parameters src-port-number — The source port number to be used as a match criteria expressed as a decimal
mask — Specifies the 16 bit mask to be applied when matching the source port.
tcp-ack
Syntax tcp-ack {true | false}
no tcp-ack
Context config>sys>sec>cpm>ip-filter>entry>match
Description
This command configures matching on the ACK bit being set or reset in the control bits of the TCP
header of an IP or IPv6 packet as an IP filter match criterion. Note that an entry containing Layer 4
match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only
the first fragment contains the Layer 4 information.
The no form of the command removes the criterion from the match entry.
Default No match criterion for the ACK bit
Parameters
true — Specifies matching on IP or IPv6 packets that have the ACK bit set in the control bits of the
false — Specifies matching on IP or IPv6 packets that do not have the ACK bit set in the control bits
tcp-syn
Syntax tcp-syn {true | false}
no tcp-syn
Context config>sys>sec>cpm>ip-filter>entry>match
config>sys>sec>cpm>ipv6-filter>entry>match
config>sys>sec>cpm>ipv6-filter>entry>match
Description
This command configures matching on the SYN bit being set or reset in the control bits of the TCP
header of an IP or IPv6 packet as an IP filter match criterion. Note that an entry containing Layer 4
match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only
the first fragment contains the Layer 4 information.
7450 ESS System Mangement Guide
integer.
Values 0 — 65535
Values 0 — 128
TCP header of an IP or IPv6 packet.
of the TCP header of the IP or IPv6 packet.
Security
Page 207