Specifications

8-82 add switch l3filter entry Rapier Switch Software Reference
Software Release 2.7.3
C613-03098-00 REV A
The protocol parameter specifies the IP protocol to match.
The protocol parameter specifies the IP protocol to match if the switch l3filter
match value is set to protocol.
The sipaddr parameter specifies the source IP address to match.
The tcpack parameter specifies the ACK (acknowledgement) flag in the TCP
header to match, if the protocol is TCP. This parameter is required if tcpack is
specified in the add or set switch l3filter match parameter, otherwise it is
invalid.
The tcpdport parameter specifies the destination TCP port to match, if the
protocol is TCP.
The tcpfin parameter specifies the FIN flag in the TCP header to match, if the
protocol is TCP. This parameter is required if tcpfin is specified in the ADD or
set switch l3filter match parameter, otherwise it is invalid.
The tcpsport parameter specifies the source TCP port to match, if the protocol
is TCP.
The tcpsyn parameter specifies the SYN flag in the TCP header to match, if the
protocol is TCP. This parameter is required if tcpsyn is specified in the add or
set switch l3filter match parameter, otherwise it is invalid.
The tos parameter specifies the type of service to match.
The ttl parameter specifies the Time to Live to match.
The type parameter specifies a protocol-type number to match. The number is
entered in hexadecimal, e.g. 0800 for an Ethernet type II IP packet. This
parameter may not be used with any other packet field matching criteria, nor
may it be used with the settos action. With all other packet matching criteria
there is an implicit match to an IP protocol Ethernet type II packet.
The udpdport parameter specifies the UDP destination port to match, if the
protocol is UDP.
The udpsport parameter specifies the UDP source port to match, if the protocol
is UDP.
Example To add a filter to block Telnet sessions, use the commands:
add switch l3filter match=tcpdport,prot
add switch l3filter=1 entry action=deny prot=tcp tcpdport=23
Related Commands delete switch l3filter entry
set switch l3filter entry
show switch l3filter