Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - COMMAND REFERENCE N TO Z 2010-10-19 Command Reference Manual page 478

JunosE 11.3.x Command Reference Guide N to Z
436
sourceHostAddress—Source host address to match
any—Matches any source or destination address
sourceQualifier—For UDP or TCP protocols, one of the following protocol-specific
classifier parameters. See Creating or Modifying Classifier Control Lists for IP Policy Lists
in the JunosE Policy Management Configuration Guide, for details.
portOperator—One of the following Boolean operator keywords: lt (less than), gt
(greater than), eq (equal to), ne (not equal), or range (range of port numbers)
range—Single port number or a range of port numbers
destinationAddress—Destination address to match
destinationMask—Wild-card mask to apply to the destination address
destinationHostAddress—Destination host address to match
destinationQualifier—One of the following protocol-specific classifier parameters for
destination TCP or UDP ports, ICMP code and type, or IGMP type. The portOperator
and port range are used with TCP and UDP. The icmpType, icmpCode, and igmpType
parameters are used with ICMP and IGMP.
portOperator—one of the following Boolean operator keywords: lt (less than), gt
(greater than), eq (equal to), or ne (not equal), or range (range of port numbers)
(TCP and UDP only)
range—Single port number or a range of port numbers
icmpType—ICMP message type (ICMP only)
icmpCode—ICMP message code (ICMP only)
igmpType—IGMP message type (IGMP only)
tcpQualifier—TCP flags classification parameters
tcpFlag—For TCP only; a logic equation that specifies flag bit values; ! means logical
NOT and & means logical AND; use any of the following flag names:
ack—0x10
fin—0x01
push—0x08
rst—0x04
syn—0x02
urgent—0x20
ipFlags—Logic equation that specifies flag bit values; ! means logical NOT and & means
logical AND; use any of the following flag names:
dont-fragment—0x02
more-fragments—0x01
Copyright © 2010, Juniper Networks, Inc.