Dell Force10 S4810P Configuration Manual page 908

Command Syntax
{ | }
deny permit tcp
} [
ip-address operator port
|
any host ip-address
[ ] [
established count
{ | }
deny permit udp
} [
ip-address operator port
|
any host ip-address
Figure 43-14
filters were assigned sequence numbers based on the order in which they were configured (for example,
the first filter was given the lowest sequence number). The
mode displays the two filters with the sequence numbers 5 and 10.
908
| Security
{ | |
any host
source mask
[ ]] {
port destination mask
} [ [ ]]
operator port port
[ ] | ]
byte log
{ | |
any host
source mask
[ ]] {
port destination mask
} [ [ ]] |
log
operator port port
illustrates a Trace list in which the sequence numbers were assigned by the software. The
Command Mode
TRACE LIST
|
TRACE LIST
|
]
show config
Purpose
Configure a deny or permit filter to
examine TCP packets. Configure the
following required and optional
parameters:
• : An IP address as the source IP
source
address for the filter to match.
• a network mask
mask:
• : to match any IP source address
any
• to match IP addresses
host ip-address:
in a host.
• : An IP address as the
destination
source IP address for the filter to
match.
•
precedence precedence
• range: 0 to 15
tos tos-value
• count packets processed by the
count:
filter.
• count bytes processed by the
byte:
filter.
• is supported.
log:
Configure a deny or permit filter to
examine UDP packets. Configure the
following required and optional
parameters:
• : An IP address as the source IP
source
address for the filter to match.
• a network mask
mask:
• : to match any IP source address
any
• to match IP addresses
host ip-address:
in a host.
• : An IP address as the
destination
source IP address for the filter to
match.
•
precedence precedence
• range: 0 to 15
tos tos-value
• count packets processed by the
count:
filter.
• count bytes processed by the
byte:
filter.
• is supported.
log:
command in the TRACE LIST
range: 0 to 7.
range: 0 to 7.