User guide

Chapter 7 Line Configuration
Configuring Traffic Rules and Counters
SCE 1000 2xGBE Release 2.0.10 User Guide
7-8 OL-7117-02
all|([all-but] (<ip-address>|<ip-range>))
• <ip-address> is a single IP address in dotted-decimal notation, such as 10.1.2.3
• <ip-range> is an IP subnet range, in the dotted-decimal notation followed by the
number of significant bits, such as 10.1.2.0/24.
• Use the all-but keyword to exclude the specified IP address or range of IP addresses
protocol:
Any one of the following protocols:
TCP/UCP/ICMP/IGRP/EIGRP/IS-IS/OSPF/Other
port specification (TCP/UDP only):
all|([all-but] (<port>|<port-range>))
• <port> is a single port number (0-65535)
• <port-range> is a port range in the following notation: <min-port>:<max-port>, such
as 80:82.
• Use the all-but keyword to exclude the specified port or range of ports
<flags specification> (TCP only):
Defines criteria for matching packets based on the TCP flag values.
all | (SYN (0|1|all) [FIN (0|1|all) [RST (0|1|all) [ACK
(0|1|all) [URG (0|1|all) [PSH (0|1|all)]]]]])
For each flag, a value of 0, 1, or ‘all’ can be selected. Default is “all”.
Note that flags are always processed in order, so that it is not possible to define a specific
value for one flag without defining criteria for the preceding flags. So, for example, to specify
ACK = 0 as one of the criteria, the preceding flags, SYN, FIN, and RST, must be set to all.
The URG and PSH flags can be ignored, as they come after the ACk flag.
direction:
Any of the following:
upstream/downstream/all
traffic-counter:
Either of the following:
• name <name of an existing traffic counter>: Packets meeting the
criteria of the rule are to be counted in the specified counter. If a counter name is defined,
the “count” action is also defined implicitly. The keyword name must appear as well as
the actual name of the counter.
• none: If none is specified, then an action must be explicitly defined via the action
option.
action: (not required if the action is count only)
Either of the following:
ignore/block