Example:
The following example displays a matching configuration.
A:ALU-7>config>filter>ip-filter# info
----------------------------------------------
----------------------------------------------
A:ALU-7>config>filter>ip-filter#
Use the following CLI syntax to configure IPv6 filter matching criteria:
CLI Syntax:
7705 SAR OS Router Configuration Guide
config>filter>ip-filter>entry# match
config>filter>ip-filter>entry>match# src-ip 10.10.10.10/
32
config>filter>ip-filter>entry>match# dst-ip 10.10.10.91/
24
config>filter>ip-filter>entry>match# exit
description "filter-main"
scope exclusive
entry 10 create
description "no-91"
match
dst-ip 10.10.10.91/24
src-ip 10.10.10.10/32
exit
action forward
exit
Note: IPv4 filter entries can specify one or more matching criteria, with one caveat. In order
to support the maximum 256 entries for IPv4 filters, any entry that uses source port (src-
port) and/or destination port (dst-port) ranges (lt, gt, or range keywords) as match
criteria must be within the first 64 entries.
config>filter>ipv6-filter>entry#
match
dscp dscp-name
dst-ip {ip-address/prefix-length}
dst-port {{lt | gt | eq} dst-port-number} |
{range start end}
icmp-code icmp-code
icmp-type icmp-type
src-ip {ip-address/prefix-length}
src-port {{lt | gt | eq} src-port-number} |
{range start end}
tcp-ack {true | false}
tcp-syn {true | false}
Filter Policies
297