Motorola 3397GP manual 208

Administrator’s Handbook

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index dst-compare [ nc ne lt le eq gt ge ]

Sets the destination compare operator action for the specified filter rule. dst-compareonly displays when the protocol is TCP or UDP.

Operator	Action
nc	No compare
ne	Not equal to
lt	Less than
le	Less than or equal to
eq	Equal to
ge	Greater than or equal to
gt	Greater than

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index src-port value

Specifies the source IP port to match packets (the port on the sending host that originated the packet, if the underlying protocol is TCP or UDP). src-portdoes not display if nc is set for src-compareor dst- compare.

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index dst-port value

Specifies the destination IP port to match packets (the port on the receiving host that the packet is destined for, if the underlying protocol is TCP or UDP). dst-port does not display if nc is set for src- compare or dst-compare.

set security pkt-filter interface assigned-filterset filterset-name

Associates a filterset with a LAN or WAN interface.

Example:

set security pkt-filter ethernet A assigned-filterset set1

208