Hitachi GR2000 Series Configuration Commands page 158

Hitachi Gigabit Router GR2000 Series Enhanced Version Configuration Commands, Vol. 2
Note: When using IP address pair switch, high-order protocol port No. pair switch, or IP
*
address high-order protocol port No. synchronization switch, pay attention to the
following:
(1) When using IP address pair switch for "-ip_pair": When using source IP address and
destination IP address for range specification, set not to overlap the source IP address
range and destination IP address range. If these ranges overlap, take either of the
following actions:
Set pair switch to -ip_pair_off; -port_pair_off; -pair_synchronized.
Divide the definition of filter list information so as not to overlap the IP addresses.
(2) When using high-order protocol port No. pair switch for "-port_pair": When using
source high-order protocol port No. and destination source high-order protocol port No.
for range specification, set not to overlap the source high-order protocol port No. and
destination source high-order protocol port No. range. If these ranges overlap, take
either of the following actions:
Set pair switch to -ip_pair_off; -port_pair_off; -pair_synchronized.
Divide the definition of filter list information so as not to overlap the high-order protocol
port.
(3) When using IP address pair switch, high-order protocol port No. pair switch, or IP
address high-order protocol port No. synchronization switch by combining them, use
them in the combination shown in Tables Table 1-60 and 1-61. The setting values of an
upper protocol port number's pair switch and IP address upper protocol number's
interlock pair switch are validated when 6(TCP) or 17(UDP) is defined in the upper
protocol number. The setting values of an upper protocol port number's pair switch and
IP address upper protocol number's interlock pair switch are invalidated when the upper
protocol number is undefined or when numbers other than 6(TCP) or 17(UDP) are
defined in the upper protocol number.
1-116 GR2K-GA-0014
Ver. 07-02