Filter Command Reference
328
—
policy
policy-id [create]
—
description
description-string
— no
description
—
entry
entry-id [create]
— no
entry
entry-id
—
action
{forward | reject | nat}
— no
action
—
action nat
—
description
— no
description
— [no]
limit
—
— no
—
match
[local] protocol protocol-id
— no
match
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
— no
—
profile
— no
profile
—
name
policy-name
— no
name
—
session-high-wmark
percentage
—
session-low-wmark
percentage
[destination ip-address port tcp-udp-port]
description-string
concurrent-sessions
number
concurrent-sessions
direction
{zone-outbound | zone-inbound | both}
direction
dst-ip
ip-address to ip-address
dst-ip
dst-port
{lt | gt | eq} tcp/udp port range start end
dst-port
icmp-code
icmp-code
icmp-code
icmp-type
icmp-type
icmp-type
src-ip
ip-address to ip-address
src-ip
src-port
{lt | gt | eq} tcp/udp port range start end
src-port
{profile-id | profile-name}
7705 SAR OS Router Configuration Guide