Juniper JUNOSE 11.1.X - COMMAND REFERENCE N TO Z 4-6-2010 Command Reference Manual page 474

JUNOSe 11.1.x Command Reference Guide N to Z
432
secure ip classifier-list
sourceHostAddress Source host address to match
any Matches any source or destination address
sourceQualifier For UDP or TCP protocols, one of the following protocol-specific
classifier parameters. See Creating or Modifying Classifier Control Lists for IP Policy
Lists in the JUNOSe Policy Management Configuration Guide, for details.
portOperator One of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), ne (not equal), or range (range of port
numbers)
range Single port number or a range of port numbers
destinationAddress Destination address to match
destinationMask Wild-card mask to apply to the destination address
destinationHostAddress Destination host address to match
destinationQualifier One of the following protocol-specific classifier parameters
for destination TCP or UDP ports, ICMP code and type, or IGMP type. The
portOperator and port range are used with TCP and UDP. The icmpType, icmpCode,
and igmpType parameters are used with ICMP and IGMP.
portOperator one of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), or ne (not equal), or range (range of port
numbers) (TCP and UDP only)
range Single port number or a range of port numbers
icmpType ICMP message type (ICMP only)
icmpCode ICMP message code (ICMP only)
igmpType IGMP message type (IGMP only)
tcpQualifier TCP flags classification parameters
tcpFlag For TCP only; a logic equation that specifies flag bit values; ! means
logical NOT and & means logical AND; use any of the following flag names:
ack 0x10
fin 0x01
push 0x08
rst 0x04
syn 0x02
urgent 0x20
ipFlags Logic equation that specifies flag bit values; ! means logical NOT and
& means logical AND; use any of the following flag names:
dont-fragment 0x02
more-fragments 0x01
reserved 0x04