Administrator Guide

[bit] [operator]{source-port source-port| source-port-range start-port -
end-port} {destination-port destination-port| destination-port-range start-
port - end-port}
To delete a filter, use the no seq sequence-number command.
Parameters
sequence-
number
Enter a number from 1 to 65535.
permit Enter the keyword permit assign the sequence to the permit list.
redirect Enter the keyword redirect to assign the sequence to the redirect list.
ip-address Enter the keyword IP address of the forwarding router.
tunnel Enter the keyword tunnel to configure the tunnel setting.
tunnel-id Enter the keyword tunnel-id to redirect the traffic.
track Enter the keyword track to enable the tracking.
track <obj-id> Enter the keyword track <obj-id> to track object-id.
ip-protocol-
number
Enter the keyword ip-protocol-number then the number from 0 to 255 for
the protocol identified in the IP protocol header.
protocol-type Enter one of the following keywords as the protocol type:
● icmp for internet control message protocol
● ip for any internet protocol
● tcp for transmission control protocol
● udp for user datagram protocol
source Enter the IP address of the network or host from which the packets were sent.
mask Enter a network mask in /prefix format (/x).
any Enter the keyword any to specify that all traffic is subject to the filter.
host ip-address Enter the keyword host then the IP address to specify a host IP address.
destination Enter the IP address of the network or host to which the packets are sent.
bit (OPTIONAL) For the TCP protocol type only, enter one or a combination of the
following TCP flags:
● ack = acknowledgement
● fin = finish (no more data from the user)
● psh = push function
● rst = reset the connection
● syn = synchronize sequence number
● urg = urgent field
operator (OPTIONAL) For the TCP and UDP parameters only. Enter one of the following
logical operand:
● eq = equal to
● neq = not equal to
● gt = greater than
● lt= less than
● range = inclusive range of ports (you must specify two ports for the port
command parameter.)
source port Enter the keywords source-port then the port number to be matched in the
ACL rule in the ICAP rule
destination-port Enter the keywords destination-port then the port number to be matched in
the ACL rule in the ICAP rule.
source-port-
range
Enter the keywords Source-port-range then the range of the start port to end
port to be matched in the ACL rule in the ICAP rule.
Policy-based Routing (PBR) 1163