Users Guide

The following is a list of the Dell Networking OS version history for this command.
Version Description
9.2(0.2) Introduced on the Z9000, S4810, and S4820T.
match
Apply an match lter to the crypto policy.
S4820T
Syntax
match seq-num tcp [sourceip address | ipv6 address {mask} {source-port
number}] [destination ip address | ipv6 address {mask} {destination-port
number}]
To remove the match lter for the crypto map, use the no match seq-num tcp [source ip
address | ipv6 address {mask} {source-port number}] [destination ip address
| ipv6 address {mask} {destination-port number}] command.
Parameters
seq-num Enter the match command sequence number.
sourceip-address |
ipv6 address
Enter the keyword source then the IPv4 or IPv6 address for the source.
mask Enter the mask prex length in /nn format.
source-port number Enter the source port number.
destination-port
number
Enter the destination port number.
Defaults none
Command Modes CONFIG-CRYPTO-POLICY
Command History
This guide is platform-specic. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.2(0.2) Introduced on the Z9000, S4810, and S4820T.
Usage Information
• IPv4 addresses support only -/32 mask types.
• IPv6 addresses support only -/128 mask types.
• Congure match for bi-directional trac for optimal routing.
• Only TCP is supported.
Example
match 0 tcp a::1 /128 0 a::2 /128 23
match 1 tcp a::1 /128 23 a::2 /128 0
match 2 tcp a::1 /128 0 a::2 /128 21
match 3 tcp a::1 /128 21 a::2 /128 0
Internet Protocol Security (IPSec)
739