Tcp-ack, Tcp-syn – Alcatel-Lucent 7750 SR OS User Manual

Page 381

Advertising
background image

Filter Policies

7750 SR OS Router Configuration Guide

Page 381

Parameters

lt | gt | eq — Specifies the operator to use relative to src-port-number for specifying the port number

match criteria.

lt specifies all port numbers less than src-port-number match.

gt specifies all port numbers greater than src-port-number match.

eq specifies that src-port-number must be an exact match.

src-port-number — The source port number to be used as a match criteria expressed as a decimal

integer.

Values

1 — 65535

range start endSpecifies an inclusive range of port numbers to be used as a match criteria. The

source port numbers start-port and end-port are expressed as decimal integers.

Values

1 — 65535

tcp-ack

Syntax

tcp-ack {true | false}
no tcp-ack

Context

config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match

Description

This command configures matching on the ACK bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion.

The no form of the command removes the criterion from the match entry.

Default

No match criterion for the ACK bit

Parameters

true — Specifies matching on IP packets that have the ACK bit set in the control bits of the TCP

header of an IP packet.

false — Specifies matching on IP packets that do not have the ACK bit set in the control bits of the

TCP header of the IP packet.

tcp-syn

Syntax

tcp-syn {true | false}
no tcp-syn

Context

config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match

Description

This command configures matching on the SYN bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion.

The SYN bit is normally set when the source of the packet wants to initiate a TCP session with the
specified destination IP address.

The no form of the command removes the criterion from the match entry.

Advertising