Alcatel-Lucent 7450 ESS Series Configuration Manual page 462

IP (v4/v6) Filter Entry Commands
eq — Specifies the operator to use relative to dst-port-number for specifying the port number match
dst-port-number — The destination port number to be used as a match criteria expressed as a decimal
range start end — Specifies an inclusive range of port numbers to be used as a match criteria. The
fragment
Syntax IPv4:
fragment {true|false}
no fragment
IPv6:
fragment {true|false|first-only|non-first-only}
no fragment
config>filter>ip-filter>entry>match
Context
config>filter>ipv6-filter>entry>match
This command specifies fragmented or non-fragmented IP packets as an IP filter match criterion.
Description
Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc)
fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
This command enables match on existence of IPv6 Fragmentation Extension Header in the IPv6 filter
policy. To match first fragment of an IP fragmented packet, specify additional Layer 4 matching
criteria in a filter policy entry. The no version of this command ignores IPv6 Fragmentation
Extension Header presence/absence in a packet when evaluating match criteria of a given filter policy
entry.
The no form of the command removes the match criterion.
Default no fragment
true — Specifies to match on all fragmented IP packets. A match will occur for all packets that have
Parameters
false — Specifies to match on all non-fragmented IP packets. Non-fragmented IP packets are packets
first-only — For IPv6: Matches if a packet is an initial fragment of the fragmented IPv6 packet.
non-first-only — For IPv6: Matches if a packet is a non-initial fragment of the fragmented IPv6
Page 462
eq specifies that dst-port-number must be an exact match.
criteria. The eq keyword specifies that dst-port-number must be an exact match.
integer.
0 — 65535
Values
destination port numbers start-port and end-port are expressed as decimal integers.
0 — 65535
Values
either the MF (more fragment) bit set or have the Fragment Offset field of the IP header set to a
non-zero value. For IPv6, packet matches if it contains IPv6 Fragmentation Extension Header.
that have the MF bit set to zero and have the Fragment Offset field also set to zero. For IPv6,
packet matches if it does not contain IPv6 Fragmentation Extension Header.
packet.
7450 ESS OS Router Configuration Guide