•If you know the filter sequence number, use the no seq sequence-numbersyntax command.

•You can also use the no permit {ip-protocol-number protocol- type} {source mask any host ip-address} {destination mask any host ip-address} [bit] [operators] command.

Parameters

Enter a number from 0 to 255 for the protocol identified in

ip-protocol-

number

the IP protocol header.

protocol-type

Enter one of the following keywords as the protocol type:

 

• icmp for internet control message protocol

 

• ip for any internet protocol

 

• tcp for transmission control protocol

 

• udp for user datagram protocol

source

Enter the IP address of the network or host from which the

 

packets were sent.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all traffic is subject to

 

the filter.

host ip-address

Enter the keyword host then he IP address to specify a host

 

IP address.

destination

Enter the IP address of the network or host to which the

 

packets are sent.

bit

(OPTIONAL) For the TCP protocol type only, enter one or a

 

combination of the following TCP flags:

 

• ack = acknowledgement

 

• fin = finish (no more data from the user)

 

• psh = push function

 

• rst = reset the connection

 

• syn = synchronize sequence number

 

• urg = urgent field

operator

(OPTIONAL) For TCP and UDP parameters only. Enter one of

 

the following logical operand:

 

• eq = equal to

 

• neq = not equal to

 

• gt = greater than

 

• lt= less than

 

• range = inclusive range of ports (you must specify two

 

ports for the portcommand parameter.)

Policy-based Routing (PBR)

1179

Page 1179
Image 1179
Dell 9.7(0.0) manual Ip-protocol, Protocol-type