match-lists (rule sets)
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
227
Alcatel-Lucent
Beta
Beta
OmniAccess 5510 Unified Services Gateway CLI Command Reference Guide
D
EFAULT
V
ALUE
•
If no protocol is specified then, IP is the default protocol.
•
Fields that are not referenced in the rule are by default considered a wildcard
match e.g if the protocol portion of the rule is not specified, it is automatically
considered as `any' match. The keyword `
any'
can be used to indicate a wildcard
match.
•
Rules start with Line number 1 and follow a sequential order
.
E
XAMPLE
ALU(config-match-list-test)# 1 ip any any
ALU(config-match-list-test)# 10 tcp host 1.1.1.1 any from 6050
ALU(config-match-list-test)# 1 udp list L3 list L4 service tftp
ALU(config-match-list-test)# 2 icmp any any icmp-type 1
ALU(config-match-list-test)# 10 protocol 1 any any dscp 10
fragment
Used to match an IP fragment.
ip-precedence
<
0-7
>
<
precedence-mnemonics
>
Specifies the IP Precedence.
length
{<
1-1500
>|{
eq
|
ge
|
gt
|
le
|
lt
|
range
<
1-
1500
>}
Specifies a packet length. Packet lengths can be
expressed as values, a range of values, or other
comparatives such as
gt
(greater than),
lt
(less
than) etc.
tos
<
0-15
> <
tos-
mnemonics
>
Specifies IP Type Of Service.
type
{
noe
|
ftp
|
normal
|
rpc
|
rtcp
|
rtp
|
sip
|
tftp
}
Service type used by the ALGs.
icmp-type
<
0-255
> [
icmp-
subtype
<
0-255
>]
When ICMP is specified as the protocol, the
ICMP type and subtype can be included in the
rule specification. The subtype names available
are dependent upon the ICMP type specified.
ack
|
established
|
fin
|
rst
|
syn
|
urg
Denotes the session state and TCP flags.
from
<
1-65536
>
Source port for a TCP or UDP protocol.
service
{<
1-
65536
>|<
protocol
>}
Destination port for a TCP or UDP protocol.
Parameter
Description
