Table of Contents
Advertisement
Security Command Reference
netmask — the dotted-decimal equivalent of the mask length
dst-ip
Syntax
dst-ip ipv6-address/prefix-length
no dst-ip
Context
config>system>security>cpm-filter>ipv6-filter>entry>match
Description
This command configures a destination IPv6 address range to be used as an IP filter match criterion.
To match on the destination IP address, specify the address and prefix length; for example, 11::12/128.
The no form of the command removes the destination IP address match criterion.
Default
n/a
Parameters
ipv6-address/prefix-length — the IPv6 address on the interface
dst-port
Syntax
dst-port tcp/udp port-number [mask]
no dst-port
Context
config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description
This command specifies the TCP/UDP port to match the destination port of the packet.
The no form of the command removes the destination port match criterion.
The TCP or UDP protocol must be configured using the match command before this filter can be
configured.
Parameters
tcp/udp port-number — the destination port number to be used as a match criterion
mask — the 16-bit mask to be applied when matching the destination port
96
Values
0.0.0.0 to 255.255.255.255
Values
ipv6-address:
prefix-length
Values
0 to 65535 (accepted in decimal, hexadecimal, or binary format)
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D
1 to 128
7705 SAR OS System Management Guide
Advertisement
Table of Contents
