Security54"FD 100/320Gbps NT and FX NT IHub SystemBasics, Management and OAM Guide"3HH-11982-AAAA-TQZZA Issue: 104.4.2.6 matchTable 41 match commandTable 42 IP Protocol NamesItem DescriptionSyntax [no] match [protocol protocol-id]Context configure>system>security>cpu-filter>ip-filter>entryDescription This command enables the context to enter match criteria for the filter entry. When the matchcriteria have been satisfied the action associated with the match criteria is executed.If more than one match criteria (within one match statement) are configured then all criteriamust be satisfied (AND function) before the action associated with the match is executed.A match context may consist of multiple match criteria, but multiple match statements cannotbe entered per entry.The no form of the command removes the match criteria for the entry-id.Parameters protocol — The protocol keyword configures an IP protocol to be used as an IP filter matchcriterion. The protocol type such as TCP or UDP is identified by its respective protocol number.protocol-id — Configures the decimal value representing the IP protocol to be used as an IPfilter match criterion. Well known protocol numbers include ICMP(1), TCP(6), UDP(17). The noform the command removes the protocol from the match criteria.Values: 0 — 255: protocol numbers accepted in DHBkeywords - none|crtp|crudp|egp|eigrp|encap|ether-ip| gre|icmp|idrp|igmp| igp|ip|ipv6|ipv6-frag|ipv6-icmp|ipv6-no-nxt|ipv6-opts|ipv6-route|isis|iso-ip|l2tp| ospf-igp|pim|pnni|ptp|rdp|rsvp|stp|tcp|udp|vrrp* — udp/tcp wildcardProtocol Protocol ID Descriptionicmp 1 Internet Control Messageigmp 2 Internet Group Managementip 4 IP in IP (encapsulation)tcp 6 Transmission Control Protocolegp 8 Exterior Gateway Protocoligp 9 any private interior gateway (used by Cisco for their IGRP)udp 17 User Datagramrdp 27 Reliable Data Protocolipv6 41 IPv6ipv6-route 43 Routing Header for IPv6ipv6-frag 43 Fragment Header for IPv6idrp 45 Inter-Domain Routing Protocol(1 of 2)
