Packet Classification - Siemens S223 User Manual

UMN:CLI
7.6.4.3
!
152

Packet Classification

After configuring a packet classification for a rule, then configure how to process the
packets. To specify a packet-classifying pattern, use the following command.
When specifying a source and destination IP address as a packet-classifying pattern, the
destination IP address must be after the source IP address.
Command
ip {A.B.C.D | A.B.C.D/M | any }
{A.B.C.D | A.B.C.D/M | any } [0-
255]
ip {A.B.C.D | A.B.C.D/M | any }
{A.B.C.D | A.B.C.D/M | any } icmp
ip {A.B.C.D | A.B.C.D/M | any }
{A.B.C.D | A.B.C.D/M | any } icmp
{<0-255> | any } {<0-255> | any }
ip {A.B.C.D | A.B.C.D/M | any }
{A.B.C.D | A.B.C.D/M | any } { tcp |
udp }
ip {A.B.C.D | A.B.C.D/M | any }
{A.B.C.D | A.B.C.D/M | any } { tcp |
udp } {<1-65535> | any } {<1-
65535> | any }
ip {A.B.C.D | A.B.C.D/M | any }
{A.B.C.D | A.B.C.D/M | any } tcp
{<0-65535> | any } {<0-65535> |
any } {TCP-FLAG | any }
SURPASS hiD 6615 S223/S323 R1.5
Mode
Classifies an IP address:
A.B.C.D: source/destination IP address
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
0-255: IP protocol number
Classifies an IP protocol (ICMP):
A.B.C.D: source/destination IP address
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
icmp: ICMP
Classifies an IP protocol (ICMP):
A.B.C.D: source/destination IP address
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
icmp: ICMP
0-255: ICMP message type number
0-255: ICMP message code number
Classifies an IP protocol (TCP/UDP):
A.B.C.D: source/destination IP address
Admin-rule
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
tcp: TCP
udp: UDP
Classifies an IP protocol (TCP/UDP):
A.B.C.D: source/destination IP address
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
tcp: TCP
udp: UDP
0-65535: TCP/UDP source/destination port number
any: any TCP/UDP source/destination port
Classifies an IP protocol (TCP):
A.B.C.D: source/destination IP address
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
tcp: TCP
0-65535: TCP source/destination port number
any: any TCP source/destination port
TCP-FLAG: TCP flag (e.g. S(SYN), F(FIN))
any: any TCP flag
User Manual
Description
A50010-Y3-C150-2-7619