dstipaddrto

End destination IP address of the range of destination IP

 

 

 

 

<dstipaddrto-val>

addresses. This field and 'dstipaddrfrom' specifiy a range of

 

 

 

 

 

destination IP addresses, if 'dstaddrcmp' is either 'inrange' or

 

 

 

 

 

'exrange'. Otherwise this field is invalid

 

 

 

 

 

Type: Create － Optional

 

 

 

 

 

Modify － Optional

 

 

 

 

 

Default value: 255.255.255.255

 

 

 

 

 

 

 

 

 

 

prototypefrom

Start IP protocol type of the range of IP protocol types. This field

 

 

 

 

<prototypefrom-val>

is invalid if 'prototypecmp' is 'any'.This field and 'prototypeto'

 

 

 

 

 

specify a range of IP protocol types, if 'prototypecmp' is either

 

 

 

 

 

'inrange' or 'exrange'.

 

 

 

 

 

Type: Create － Optional

 

 

 

 

 

Modify － Optional

 

 

 

 

 

Default value: 0

 

 

 

 

 

 

 

 

 

 

prototypeto

End IP protocol type of the range of IP protocol types.This field

 

 

 

 

<prototypeto-val>

and 'prototypefrom' specifiy a range of IP protocol types, if

 

 

 

 

 

'prototypecmp' is either 'inrange' or 'exrange'. Otherwise this field

 

 

 

 

 

is invalid.

 

 

 

 

 

Type: Create － Optional

 

 

 

 

 

Modify － Optional

 

 

 

 

 

Default value: 27

 

 

 

 

 

 

 

 

 

 

srcaddrcmp eq neq

Source IP addresss comparison type. 'ingenlist' means check if

 

 

 

 

lt leq gt geq any

source ip address present in interface classifier generic list.

 

 

 

 

inrange exrange

'notingenlist' means check if source ip address not present in

 

 

 

 

ingenlist

interface classifier generic list. 'ingenlist' and 'notingenlist' are

 

 

 

 

notingenlist

invalid if the direction of the rule for which this subrule is being

 

 

 

 

 

created is 'out'

 

 

 

 

 

Type: Create － Optional

 

 

 

 

 

Modify － Optional

 

 

 

 

 

Default value: any

 

 

 

 

 

 

 

 

 

 

dstaddrcmp eq neq

Destination IP address comparison type. 'ingenlist' means check

 

 

 

 

lt leq gt geq any

if destination ip address present in interface classifier generic list.

 

 

 

 

inrange exrange

'notingenlist' means check if destination ip address not present in

 

 

 

 

ingenlist

interface classifier generic list. 'ingenlist' and 'notingenlist' are

 

 

 

 

notingenlist

invalid if the direction of the rule for which this subrule is being

 

 

 

 

 

created is 'out'.

 

 

 

 

 

Type: Create － Optional

 

 

 

 

 

Modify － Optional

 

 

 

 

 

Default value: any

 

 

 

 

 

 

 

 

 

 

prototypecmp eq neq

IP Protocol type comparison type.

 

 

 

 

lt leq gt geq any

Type: Create － Optional

 

 

 

 

 

 

 

 

 

 

 

 

 

 

432

 

 

IDL series User Guide