Reference Guide

The following is a list of the FTOS version history for this command.
Version 9.2(0.2) Introduced on the Z9000, S4810, and S4820T.
match
Apply an match filter to the crypto policy.
S4820T
Syntax
match seq-num tcp [sourceip address | ipv6 address {mask}
{
source-port number}] [destination ip address | ipv6 address
{mask} {destination-port number}]
To remove the match filter for the crypto map, use the no match seq-num tcp
[source ip address | ipv6 address {mask} {source-port number}]
[destination ip address | ipv6 address {mask} {destination-port
number}] command.
Parameters
seq-num Enter the match command sequence number.
source ip-address
| ipv6 address
Enter the keyword source then the IPv4 or IPv6 address for the
source.
mask Enter the mask prefix length in /nn format.
source-port
number
Enter the source port number.
destination-port
number
Enter the destination port number.
Defaults none
Command Modes CONFIG-CRYPTO-POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the
relevant FTOS Command Line Reference Guide .
The following is a list of the FTOS version history for this command.
Version 9.2(0.2) Introduced on the Z9000, S4810, and S4820T.
Usage
Information
• IPv4 addresses support only -/32 mask types.
• IPv6 addresses support only -/128 mask types.
• Configure match for bi-directional traffic for optimal routing.
• Only TCP is supported.
Example
match 0 tcp a::1 /128 0 a::2 /128 23
match 1 tcp a::1 /128 23 a::2 /128 0
match 2 tcp a::1 /128 0 a::2 /128 21
642