Hitachi Gigabit Router GR2000 Series Enhanced Version Configuration Commands, Vol. 2

{-ipDescription:pair-ip_pairThisoffparameter}specifies a method to check IP source and destination addresses.

-ip_pair

Switches IP source and destination addresses for an address check, then runs a check without switching the addresses (see note 1).

-ip_pair_off

Checks IP source and destination addresses without switching the addresses.

Before specifying the -ip_paircheck, set the synchronized check function for IP address and upper level protocol port number to OFF (-pair_synchronized_off).

Default:-ip_pair

masklen-ipDescription:source<Subnet<IPAddress>MaskThisBit[parameterLength>-<IPAddress>specifies/<SubnetmasktheMask<SubnetIP sourceBitLength>]]Mask>address. A single

 

address is specified as -ip_source <IP Address>. An address

 

range is specified as -ip_source <lower limit IP Address> -

 

<upper limit IP Address>, -ip_source mask <Subnet Mask>,

 

-ip_source masklen <Subnet Mask Bit Length>, or

 

-ip_source/<Subnet Mask Bit Length>.

Default:

None (IP source address is not a flow detection condition).

Range of value:

0.0.0.0-255.255.255.255

-masklipDescription:destination<SubnetMask<IP

Address>ThisBitparameterLength>[-<IP/<SubnetspecifiesAddress>]theMaskIPmaskdestinationBit<SubnetLength>]]addressMask>. When

 

both source and destination IP addresses are set under one

 

condition, set so that the specified addresses do not overlap. If

 

they overlap, set an IP address pair switch as ip-pair-off.

 

single address is specified

-ip_destination <IP

 

. An address range is specified

-ip_destination

 

<lower limit IP

- <upper limit IP Address>,

 

-ip_destination mask <Subnet Mask>, -ip_destination

 

masklen <Subnet Mask Bit Length, or -ip_destination/

 

<Subnet Mask Bit Length>.

 

 

 

Default:

None (IP destination address is not a flow detection condition).

Range of value:

0.0.0.0-255.255.255.255

 

 

 

{-portDescription:pair-portThispairparameteroff}specifies a method to check upper-level protocol port numbers of source and destination protocols.

-port pair

Checks upper-level protocol port numbers without the port numbers of the source and destination protocols, then switches port numbers and runs the protocol port number check again (see note 1).

1-172

GR2K-GA-0014

 

Ver. 07-02

Page 214
Image 214
Hitachi GR2000 Series manual Address is specified as -ipsource IP Address. An address, Single address is specified