Alcatel-Lucent 7705 SAR System Management Manual page 94

Security Command Reference
match
Syntax match [next-header next-header]
no match
Context config>system>security>cpm-filter>ipv6-filter>entry
Description This command enables the context to enter match criteria for the IPv6 filter entry. When the match
criteria have been satisfied, the action associated with the match criteria is executed.
If more than one match criterion (within one match statement) is configured, all criteria must be
satisfied (AND function) before the action associated with the match is executed.
A match context may consist of multiple match criteria, but multiple match statements cannot be
entered per entry.
The no form of the command removes the match criteria for the entry-id.
Parameters next-header — the IPv6 next header to match. This parameter is similar to the protocol parameter
94
Table 5: IP Protocol IDs and Descriptions (Continued)
Protocol ID Protocol
123 ptp
124 isis
126 crtp
127 crudp
used in IPv4 filter match criteria.
Values [1 to 42 | 45 to 49 | 52 to 59 | 61 to 255] — (values can be expressed
in decimal, hexadecimal, or binary – DHB)
keywords: none, crtp, crudp, egp, eigrp, encap, ether-ip, gre, icmp,
idrp, igmp, igp, ip, ipv6, ipv6-icmp, ipv6-no-nxt, isis, iso-ip, l2tp,
ospf-igp, pim, pnni, ptp, rdp, rsvp, stp, tcp, udp, vrrp
* — udp/tcp wildcard
Description
Performance Transparency Protocol
ISIS over IPv4
Combat Radio Transport Protocol
Combat Radio User Datagram
7705 SAR OS System Management Guide