Gigabit Router Configuration Guide

Hitachi Gigabit Router GR2000 SeriesEnhanced Version Configuration Commands, Vol. 2
1-172 GR2K-GA-0014
Ver. 07-02
Description: This parameter specifies a method to check IP source and
destination addresses.
-ip_pair
Switches IP source and destination addresses for an address
check, then runs a check without switching the addresses (see
note 1).
-ip_pair_off
Checks IP source and destination addresses without switching
the addresses.
Before specifying the
-ip_pair check, set the synchronized
check function for IP address and upper level protocol port
number to OFF (
-pair_synchronized_off).
Default:
-ip_pair
Description: This parameter specifies the IP source address. A single
address is specified as
-ip_source <IP Address>.Anaddress
rangeisspecifiedas
-ip_source <lower limit IP Address> -
<upper limit IP Address>, -ip_source mask <Subnet Mask>,
-ip_source masklen <Subnet Mask Bit Length>, or
-ip_source/<Subnet Mask Bit Length>
.
Default: None (IP source address is not a flow detection condition).
Range of value:
0.0.0.0-255.255.255.255
Description: This parameter specifies the IP destination address. When
both source and destination IP addresses are set under one
condition, set so that the specified addresses do not overlap. If
they overlap, set an IP address pair switch as ip-pair-off.
A single address is specified as
-ip_destination <IP
Address>
.Anaddressrangeisspecifiedas -ip_destination
<lower limit IP Address>
- <upper limit IP Address>,
-ip_destination mask <Subnet Mask>, -ip_destination
masklen <Subnet Mask Bit Length, or -ip_destination/
<Subnet Mask Bit Length>
.
Default: None (IP destination address is not a flow detection condition).
Range of value:
0.0.0.0-255.255.255.255
Description: This parameter specifies a method to check upper-level
protocol port numbers of source and destination protocols.
-port_pair
Checks upper-level protocol port numbers without the port
numbers of the source and destination protocols, then
switches port numbers and runs the protocol port number
check again (see note 1).