Table of Contents
Advertisement
Configuration Commands
fragment contains the L4 information.
The no form of the command removes the criterion from the match entry.
Default
no tcp-ack
Parameters
true — Specifies matching on IP packets that have the ACK bit set in the control bits of the TCP
false — Specifies matching on IP packets that do not have the ACK bit set in the control bits of the
tcp-syn
Syntax
tcp-syn {true | false}
no tcp-syn
Context
config>filter>ip-filter>entry>match
Description
This command configures matching on the SYN bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion. Note that an entry containing L4 match criteria
will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first
fragment contains the L4 information.
The SYN bit is normally set when the source of the packet wants to initiate a TCP session with the
specified destination IP address.
The no form of the command removes the criterion from the match entry.
Default
no tcp-syn
Parameters
true — Specifies matching on IP packets that have the SYN bit set in the control bits of the TCP
false — Specifies matching on IP packets that do not have the SYN bit set in the control bits of the
Page 384
header of an IP packet.
TCP header of the IP packet.
header.
TCP header.
7450 ESS OS Router Configuration Guide
Advertisement
Table of Contents
