Tag Elements Beginning with F > <from> (configuration/firewall/family/inet/service-filter/term)

Usage

<configuration>
    <firewall>
        <family>
            <inet>
                <service-filter>
                    <term>
                        <from>
                            <interface-group>...</interface-group>
                            <interface-group-except>...</interface-group-except>
                            <source-address>...</source-address>
                            <destination-address>...</destination-address>
                            <address>...</address>
                            <source-prefix-list>...</source-prefix-list>
                            <destination-prefix-list>...</destination-prefix-list>
                            <prefix-list>...</prefix-list>
                            <protocol>...</protocol>
                            <protocol-except>...</protocol-except>
                            <ip-options>...</ip-options>
                            <ip-options-except>...</ip-options-except>
                            <source-port>...</source-port>
                            <source-port-except>...</source-port-except>
                            <destination-port>...</destination-port>
                            <destination-port-except>...</destination-port-except>
                            <port>...</port>
                            <port-except>...</port-except>
                            <esp-spi>...</esp-spi>
                            <esp-spi-except>...</esp-spi-except>
                            <is-fragment/>
                            <first-fragment/>
                            <fragment-offset>...</fragment-offset>
                            <fragment-offset-except>...</fragment-offset-except>
                            <fragment-flags>fragment-flags</fragment-flags>
                            <ah-spi>...</ah-spi>
                            <ah-spi-except>...</ah-spi-except>
                            <loss-priority>...</loss-priority>
                            <loss-priority-except>...</loss-priority-except>
                        </from>
                    </term>
                </service-filter>
            </inet>
        </family>
    </firewall>
</configuration>

Description

Match criteria.

Contents

<address>—Match IP source or destination address.

<ah-spi>—Match IPSec AH SPI value.

<ah-spi-except>—Do not match IPSec AH SPI value.

<destination-address>—Match IP destination address.

<destination-port>—Match TCP/UDP destination port.

<destination-port-except>—Do not match TCP/UDP destination port.

<destination-prefix-list>—Match IP destination prefixes in named list.

<esp-spi>—Match IPSec ESP SPI value.

<esp-spi-except>—Do not match IPSec ESP SPI value.

<first-fragment>—Match if packet is the first fragment.

<fragment-flags>—Match fragment flags.

<fragment-offset>—Match fragment offset.

<fragment-offset-except>—Do not match fragment offset.

<interface-group>—Match interface group.

<interface-group-except>—Do not match interface group.

<ip-options>—Match IP options.

<ip-options-except>—Do not match IP options.

<is-fragment>—Match if packet is a fragment.

<loss-priority>—Match Loss Priority.

<loss-priority-except>—Do not match Loss Priority.

<port>—Match TCP/UDP source or destination port.

<port-except>—Do not match TCP/UDP source or destination port.

<prefix-list>—Match IP source or destination prefixes in named list.

<protocol>—Match IP protocol type.

<protocol-except>—Do not match IP protocol type.

<source-address>—Match IP source address.

<source-port>—Match TCP/UDP source port.

<source-port-except>—Do not match TCP/UDP source port.

<source-prefix-list>—Match IP source prefixes in named list.