Nortel Secure 4134 Configuration page 111

Variable
<src-address>
<dst-address>
[sport <src-port>] [dport
<dst-port>]
[icmptype <icmp-type>]
[icmpcode <icmp-code
>]
[dscp <dscp-value>]
[flowlabel <flowlabel-va
lue>]
[flags <tcp-flags>]
[routing {on|off}]
Copyright © 2007, Nortel Networks
.
Value
Specifies the source host or network address, in
format <A.B.C.D>. Or, enter any to specify a source
address/wildcard of 0.0.0.0/32.
Destination host or network address. Or, enter
any to specify a destination address/wildcard of
0.0.0.0/32.
Optional entry for TCP and UDP protocols; allows
the source or destination port to be filtered.
=p: Specifies port number p, where p is 1- 65535.
!=p: Excludes port p.
>p: Specifies any port number greater than p
>=p: Specifies any port number greater than or
equal to p
<p: Specifies any port number less than p
<=p: Specifies any port number less than or equal
to p
p1-p2: Specifies any port number within the range
p1 - p2
Optional numeric entry for ICMP protocol, allowing
the ICMP message type to be filtered (optional,
range is 0 - 255).
Optional numeric entry for ICMP protocol, allowing
the ICMP message code to be filtered, if specified
along with a message type. The range is 0 - 255.
IP DSCP value. Range is 0-63.
Flow label value. Range is 0-1048575.
Allows TCP flags to be filtered (optional).You can
specify multiple TCP flags by separating the above
keywords with commas (no spaces allowed). This
entry may be any of the following words:
established Used to match an established
connection (Cisco-compatible).
fin Matches the TCP FIN header flag.
syn Matches the TCP SYN header flag.
ack Matches the TCP ACK header flag.
psh Matches the TCP PSH header flag.
rst Matches the TCP RST header flag.
urg Matches the TCP URG header flag.
Specifies whether filter of routing header is on or off.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
Configuring IPv6 packet filters 111