dst-port
Syntax
dst-port {eq} dst-port-number
no dst-port
Context
config>filter>ip-filter>entry>match
Description
This command configures a destination TCP or UDP port number for an IP filter match criterion.
Note that an entry containing L4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of
a fragmented packet since only the first fragment contains the L4 information.
The no form of the command removes the destination port match criterion.
Default
none
Parameters
eq — Specifies the operator to use relative to dst-port-number for specifying the port number match
dst-port-number — The destination port number to be used as a match criteria expressed as a decimal
fragment
Syntax
fragment {true | false}
no fragment
Context
config>filter>ip-filter>entry>match
Description
Configures fragmented or non-fragmented IP packets as an IP filter match criterion. Note that an
entry containing L4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented
packet since only the first fragment contains the L4 information.
The no form of the command removes the match criterion.
Default
no fragment
Parameters
true — Configures a match on all fragmented IP packets. A match will occur for all packets that have
false — Configures a match on all non-fragmented IP packets. Non-fragmented IP packets are
icmp-code
Syntax
icmp-code icmp-code
no icmp-code
Context
config>filter>ip-filter>entry>match
7210 SAS M, X Router Configuration Guide
criteria. The eq keyword specifies that dst-port-number must be an exact match.
integer.
Values
1 — 65535
either the MF (more fragment) bit set OR have the Fragment Offset field of the IP header set to a
non-zero value.
packets that have the MF bit set to zero and have the Fragment Offset field also set to zero.
Filter Policies
Page 135