HP 5400ZL - Manual (Page 419)

Classifier-Based Software Configuration
Creating a Traffic Class
Optional TCP and UDP Match Criteria
In a class configuration, you can enter match/ignore statements that more
precisely define the TCP or UDP traffic that you want to match in an IPv4 or
IPv6 traffic class. For example, you can enter a port number as a match
criterion that specifies one or more TCP source ports, destination ports, or
both.
Context: Class configuration
Syntax: [no] [seq-number] < match | ignore > < tcp | udp >
< source-address > [operator < tcp-src-port | udp-src-port >]
< destination-address > [operator < tcp-dest-port [established]
[tcp-flag [tcp-flag ...] ] | udp-dest-port >] [ ip-dscp codepoint ]
[ precedence precedence-value ] [ tos tos-value ] [ vlan vlan-id ]
If you use TCP or UDP as the IP protocol type in a match/ignore
statement, you can optionally configure TCP or UDP source
and/or destination port numbers or ranges of numbers to more
precisely define match criteria for a traffic class. Enter the
optional TCP/UDP match criteria immediately after the source
and/or destination address in the command syntax; for exam­
ple:
ProCurve(config-class)# match tcp host 10.20.10.17
eq 23 host 10.20.10.155 established
ProCurve(config-class)# match tcp host 10.10.10.100
host 10.20.10.17 eq telnet
ProCurve(config-class)# ignore udp 10.30.10.1/24 host
10.20.10.17 range 161 162
[operator < tcp-src-port | udp-src-port >]
To specify a TCP or UDP source port number as a match
criteria, enter a comparison operator from the following list
with a TDP/UDP port number or well-known port name imme­
diately after the source-address value in the command.
Comparison Operators:
• eq < tcp/udp-port-number > — “Equal To” matches a packet with
the same TCP or UDP source port number as < tcp/udp-port­
number >.
• gt < tcp/udp-port-number > — “Greater Than” matches any
packet with a TCP or UDP source port number greater than
<
tcp/udp-port-number >.
• lt < tcp/udp-port-number > — “Less Than” matches any packet
with a TCP or UDP source port number less than < tcp/udp­
port-number >.
9-17