Match - Dell MXL 10GbE Reference Manual

match

Match a sequence number to the transmission control protocol (TCP)/user datagram protocol (UDP)
packets.
Syntax
match seq-num {tcp | udp} {ipv6 | ip} port-num dest-ip dest-
port-num
To remove the match filter for the crypto map, use the no match seq-num
command.
Parameters
seq-num
tcp
udp
ipv6
ip
port-num
dest-ip
dest-port-num
Defaults none
Command CONFIG-CRYPTO-POLICY
Modes
Command
Version 9.2(0.0)
History
Usage UDP is not supported. Only TCP 23 telnet and 21 FTP are supported.
Information
Example
Dell(conf-crypto-policy)#match 0 tcp a::1 /128 0 a::2 /128 23
Dell(conf-crypto-policy)#match 1 tcp a::1 /128 23 a::2 /128 0
Dell(conf-crypto-policy)#match 2 tcp a::1 /128 0 a::2 /128 21
Dell(conf-crypto-policy)#match 3 tcp a::1 /128 21 a::2 /128 0
Dell(conf-crypto-policy)#match 4 tcp 1.1.1.1 /32 0 1.1.1.2 /32
23
Dell(conf-crypto-policy)#match 5 tcp 1.1.1.1 /32 23
1.1.1.2 /32 0
Dell(conf-crypto-policy)#match 6 tcp 1.1.1.1 /32 0 1.1.1.2 /32
21
Dell(conf-crypto-policy)#match 7 tcp 1.1.1.1 /32 21
1.1.1.2 /32 0
Internet Protocol Security (IPSec)
Enter the match command sequence number. The range is
from 0 to 255.
Enter the keyword tcp to configure a TCP access list filter.
Enter the keyword udp to configure a UDP access list filter.
Enter the source IPv6 address.
Enter the source IPv4 address.
Enter the source port number. The range is from 0 to 65535
Enter the destination IP address.
Enter the destination port number. The range is from 0 to
65535.
Introduced on the MXL 10/40GbE Switch IO Module.
659