Match tcp-flags – Allied Telesis AT-DC2552XS User Manual
Page 499

AT-DC2552SX Switch Command Line Interface User’s Guide
Section V: Security and Traffic Control
499
MATCH TCP-FLAGS
Syntax
match tcp-flags acl|syn|fin|rst|urg
Parameters
acl
Specifies the ACK (acknowledge) TCP flag.
syn
Specifies the SYN (synchronize) TCP flag.
fin
Specifies the FIN (finish) TCP flag.
rst
Specifies the RST (reset) TCP flag.
urg
Specifies the URG (urgent) TCP flag.
Mode
Class Map Configuration mode
Description
Use this command to add one or multiple TCP flags as matching criteria to
a class map. A TCP flag is a control bit set in a TCP header. If a packet
contains a TCP header, the switch matches the criteria to the FLAGS field
in the TCP header. When a TCP flag has already been set in a class map,
this command adds a new flag as matching criterion.
When multiple TCP flags are specified as matching criteria to a class map,
the switch filters incoming traffic with an AND operand.
To remove a TCP flag as a matching criterion from a class map, use the
NO MATCH TCP-FLAGS command.
Confirmation Command