Table 41 Ip Filter Policy Criteria - Alcatel-Lucent 7705 Configuration Manual

IP Filter Matching Criteria
IPv4 and IPv6 filter policies compare the matching criteria to traffic at a network interface.
Matching criteria to drop or forward IP traffic are described in
Criteria
Protocol identifier/
next header
DSCP name
Destination IP address
and mask
Destination port/range
Fragmentation
ICMP code
ICMP type
IP option
Multiple IP options
Option present
Source IP address and
mask
7705 SAR OS Router Configuration Guide
Table 41: IP Filter Policy Criteria
Description
For IPv4, entering a protocol identifier allows the filter to match the IP protocol.
Common protocol numbers include ICMP(1), TCP(6), and UDP(17). For a full list
of protocol numbers, see the config>filter>ip-filter>entry>match
command in the Filter Command
For IPv6, entering a next header allows the filter to match the first next header
following the IPv6 header.
Entering a DSP name allows the filter to match DiffServ Code Point (DSCP) names
Entering a destination IP address and mask allows the filter to match destination IP
address and mask values (for IPv4) and matching destination IP address and prefix
length (for IPv6).
The IPv4 address scheme consists of 32 bits expressed in dotted-decimal notation.
The IPv6 address scheme consists of 128 bits expressed in colon-hexadecimal
format.
Entering a destination port/range allows the filter to match TCP or UDP values
Entering a fragment allows the filter to match the fragmentation state of packets
(fragmented or non-fragmented) (not applicable to IPv6)
Entering an ICMP code allows the filter to match an ICMP code in the ICMP header
Entering an ICMP type allows the filter to match an ICMP type in the ICMP header
Entering an IP option allows the filter to match an option or range of options in the
IP header (not applicable to IPv6)
Entering multiple IP options allows the filter to match the state of multiple option
fields in the IP header (true or false) (not applicable to IPv6)
Entering option present allows the filter to match the state of the option field in the
IP header (present or absent) (not applicable to IPv6)
Entering a source IP address and mask allows the filter to match a source IP address
and mask values (for IPv4) or a source IP address and prefix length (for IPv6).
The IPv4 address scheme consists of 32 bits expressed in dotted-decimal notation.
The IPv6 address scheme consists of 128 bits expressed in colon-hexadecimal
format.
Table
Reference.
Filter Policies
41.
283