Dell Z9500 Command Reference Manual page 919

To remove the match filter for the crypto map, use the no match seq-num tcp
[source ip address | ipv6 address {mask} {source-port number}]
[destination ip address | ipv6 address {mask} {destination-port
number}] command.
Parameters
seq-num
sourceip-
address | ipv6
address
mask
source-port
number
destination-
port number
Defaults none
Command CONFIG-CRYPTO-POLICY
Modes
Command
This guide is platform-specific. For command information about other platforms,
History
refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
9.2(1.0)
9.2(0.0)
Usage
•
Information
•
•
•
Example
match 0 tcp a::1 /128 0 a::2 /128 23
match 1 tcp a::1 /128 23 a::2 /128 0
match 2 tcp a::1 /128 0 a::2 /128 21
match 3 tcp a::1 /128 21 a::2 /128 0
match 4 tcp 1.1.1.1 /32 0 1.1.1.2 /32 23
match 5 tcp 1.1.1.1 /32 23 1.1.1.2 /32 0
match 6 tcp 1.1.1.1 /32 0 1.1.1.2 /32 21
match 7 tcp 1.1.1.1 /32 21 1.1.1.2 /32 0
Internet Protocol Security (IPSec)
Enter the match command sequence number.
Enter the keyword source then the IPv4 or IPv6 address for
the source.
Enter the mask prefix length in /nn format.
Enter the source port number.
Enter the destination port number.
Description
Introduced on the Z9500.
Introduced on the Z9000, S4810, and S4820T.
IPv4 addresses support only -/32 mask types.
IPv6 addresses support only -/128 mask types.
Configure match for bi-directional traffic for optimal routing.
Only TCP is supported.
919