Siemens S323, S223 user manual Packet Classification, 152 A50010-Y3-C150-2-7619

UMN:CLI	User Manual
	SURPASS hiD 6615 S223/S323 R1.5

7.6.4.3Packet Classification

After configuring a packet classification for a rule, then configure how to process the packets. To specify a packet-classifying pattern, use the following command.

!	When specifying a source and destination IP address as a packet-classifying pattern, the
	destination IP address must be after the source IP address.
		Command		Mode	Description
					Classifies an IP address:
	ip {A.B.C.D A.B.C.D/M		any}		A.B.C.D: source/destination IP address
	{A.B.C.D A.B.C.D/M any} [0-				A.B.C.D/M: source/destination IP address with mask
	255]				any: any source/destination IP address
					0-255: IP protocol number
					Classifies an IP protocol (ICMP):
	ip {A.B.C.D A.B.C.D/M		any}		A.B.C.D: source/destination IP address
					A.B.C.D/M: source/destination IP address with mask
	{A.B.C.D A.B.C.D/M any} icmp
					any: any source/destination IP address
					icmp: ICMP
					Classifies an IP protocol (ICMP):
					A.B.C.D: source/destination IP address
	ip {A.B.C.D A.B.C.D/M		any}		A.B.C.D/M: source/destination IP address with mask
	{A.B.C.D A.B.C.D/M any} icmp				any: any source/destination IP address
	{<0-255> any} {<0-255> any}				icmp: ICMP
					0-255: ICMP message type number
					0-255: ICMP message code number
					Classifies an IP protocol (TCP/UDP):
	ip {A.B.C.D A.B.C.D/M		any}	Admin-rule	A.B.C.D: source/destination IP address
					A.B.C.D/M: source/destination IP address with mask
	{A.B.C.D A.B.C.D/M any} {tcp
					any: any source/destination IP address
	udp}
					tcp: TCP
					udp: UDP
					Classifies an IP protocol (TCP/UDP):
					A.B.C.D: source/destination IP address
	ip {A.B.C.D A.B.C.D/M		any}		A.B.C.D/M: source/destination IP address with mask
	{A.B.C.D A.B.C.D/M any} {tcp				any: any source/destination IP address
	udp} {<1-65535> any} {<1-				tcp: TCP
	65535> any}				udp: UDP
					0-65535: TCP/UDP source/destination port number
					any: any TCP/UDP source/destination port
					Classifies an IP protocol (TCP):
					A.B.C.D: source/destination IP address
	ip {A.B.C.D A.B.C.D/M		any}		A.B.C.D/M: source/destination IP address with mask
					any: any source/destination IP address
	{A.B.C.D	A.B.C.D/M any}	tcp
					tcp: TCP
	{<0-65535>	any} {<0-65535>
					0-65535: TCP source/destination port number
	any} {TCP-FLAG any}
					any: any TCP source/destination port
					TCP-FLAG: TCP flag (e.g. S(SYN), F(FIN))
					any: any TCP flag

152 A50010-Y3-C150-2-7619