[Contents] [Prev] [Next] [Index] [Report an Error]


Usage

<configuration>
    <logical-systems>
        <firewall>
            <family>
                <inet6>
                    <service-filter>
                        <term>
                            <from>
                                <interface-group>...</interface-group>
                                <interface-group-except>...</interface-group-except>
                                <source-address>...</source-address>
                                <destination-address>...</destination-address>
                                <address>...</address>
                                <source-prefix-list>...</source-prefix-list>
                                <destination-prefix-list>...</destination-prefix-list>
                                <prefix-list>...</prefix-list>
                                <next-header>...</next-header>
                                <next-header-except>...</next-header-except>
                                <source-port>...</source-port>
                                <source-port-except>...</source-port-except>
                                <destination-port>...</destination-port>
                                <destination-port-except>...</destination-port-except>
                                <port>...</port>
                                <port-except>...</port-except>
                                <esp-spi>...</esp-spi>
                                <esp-spi-except>...</esp-spi-except>
                                <ah-spi>...</ah-spi>
                                <ah-spi-except>...</ah-spi-except>
                            </from>
                        </term>
                    </service-filter>
                </inet6>
            </family>
        </firewall>
    </logical-systems>
</configuration>

Description

Match criteria.

Contents

<address>—Match source or destination address.

<ah-spi>—Match IPSec AH SPI value.

<ah-spi-except>—Do not match IPSec AH SPI value.

<destination-address>—Match destination address.

<destination-port>—Match TCP/UDP destination port.

<destination-port-except>—Do not match TCP/UDP destination port.

<destination-prefix-list>—Match destination prefixes in named list.

<esp-spi>—Match IPSec ESP SPI value.

<esp-spi-except>—Do not match IPSec ESP SPI value.

<interface-group>—Match interface group.

<interface-group-except>—Do not match interface group.

<next-header>—Match IP protocol type.

<next-header-except>—Do not match IP protocol type.

<port>—Match TCP/UDP source or destination port.

<port-except>—Do not match TCP/UDP source or destination port.

<prefix-list>—Match source or destination prefixes in named list.

<source-address>—Match source address.

<source-port>—Match TCP/UDP source port.

<source-port-except>—Do not match TCP/UDP source port.

<source-prefix-list>—Match source prefixes in named list.


[Contents] [Prev] [Next] [Index] [Report an Error]