Filter Policies
7750 SR OS Router Configuration Guide Page 381
Parameters lt | gt | eq — Specifies the operator to use relative to src-port-number for specifying the port number
match criteria.
lt specifies all port numbers less than src-port-number match.
gt specifies all port numbers greater than src-port-number match.
eq specifies that src-port-number must be an exact match.
src-port-number — The source port number to be used as a match criteria expressed as a decimal
integer.
Values 1 — 65535
range start end — Specifies an inclusive range of port numbers to be used as a match criteria. The
source port numbers start-port and end-port are expressed as decimal integers.
Values 1 — 65535
tcp-ack
Syntax tcp-ack {true | false}
no tcp-ack
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures matching on the ACK bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion.
The no form of the command removes the criterion from the match entry.
Default No match criterion for the ACK bit
Parameters true — Specifies matching on IP packets that have the ACK bit set in the control bits of the TCP
header of an IP packet.
false — Specifies matching on IP packets that do not have the ACK bit set in the control bits of the
TCP header of the IP packet.
tcp-syn
Syntax tcp-syn {true | false}
no tcp-syn
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures matching on the SYN bit being set or reset in the control bits of the TCP
header of an IP packet as an IP filter match criterion.
The SYN bit is normally set when the source of the packet wants to initiate a TCP session with the
specified destination IP address.
The no form of the command removes the criterion from the match entry.