Optional Tcp And Udp Match Criteria - HP 3500 Series Advanced Traffic Management Manual

Classifier-Based Software Configuration
Traffic Classes
8-18

Optional TCP and UDP Match Criteria

In a class configuration, you can enter match/ignore statements that more
precisely define the TCP or UDP traffic that you want to match in an IPv4 or
IPv6 traffic class. For example, you can enter a port number as a match
criterion that specifies one or more TCP source ports, destination ports, or
both.
Context: Class configuration
Syntax: [no] [seq-number] < match | ignore > < tcp | udp >
< source-address > [operator < tcp-src-port | udp-src-port >]
< destination-address > [operator < tcp-dest-port [established]
[tcp-flag [tcp-flag ...] ] | udp-dest-port >] [ ip-dscp codepoint ]
[ precedence precedence-value ] [ tos tos-value ] [ vlan vlan-id ]
If you use TCP or UDP as the IP protocol type in a match/ignore
statement, you can optionally configure TCP or UDP source
and/or destination port numbers or ranges of numbers to more
precisely define match criteria for a traffic class. Enter the
optional TCP/UDP match criteria immediately after the source
and/or destination address in the command syntax; for exam-
ple:
HP Switch(config-class)# match tcp host 10.20.10.17
eq 23 host 10.20.10.155 established
HP Switch(config-class)# match tcp host 10.10.10.100
host 10.20.10.17 eq telnet
HP Switch(config-class)# ignore udp 10.30.10.1/24
host 10.20.10.17 range 161 162
[operator < tcp-src-port | udp-src-port >]
To specify a TCP or UDP source port number as a match
criteria, enter a comparison operator from the following list
with a TDP/UDP port number or well-known port name imme-
diately after the source-address value in the command.
Comparison Operators:
eq < tcp/udp-port-number >
•
the same TCP or UDP source port number as < tcp/udp-port-
number >.
gt < tcp/udp-port-number >
•
packet with a TCP or UDP source port number greater than
< tcp/udp-port-number >.
lt < tcp/udp-port-number >
•
with a TCP or UDP source port number less than < tcp/udp-
port-number >.
"Equal To" matches a packet with
—
"Greater Than" matches any
—
— "Less Than" matches any packet