Tag Elements Beginning with F > <from> (configuration/firewall/family/inet6/filter/term)

Usage

<configuration>
    <firewall>
        <family>
            <inet6>
                <filter>
                    <term>
                        <from>
                            <destination-class>...</destination-class>
                            <destination-class-except>...</destination-class-except>
                            <source-class>...</source-class>
                            <source-class-except>...</source-class-except>
                            <interface-group>...</interface-group>
                            <interface-group-except>...</interface-group-except>
                            <source-address>...</source-address>
                            <destination-address>...</destination-address>
                            <address>...</address>
                            <source-prefix-list>...</source-prefix-list>
                            <destination-prefix-list>...</destination-prefix-list>
                            <prefix-list>...</prefix-list>
                            <next-header>...</next-header>
                            <next-header-except>...</next-header-except>
                            <source-port>...</source-port>
                            <source-port-except>...</source-port-except>
                            <destination-port>...</destination-port>
                            <destination-port-except>...</destination-port-except>
                            <port>...</port>
                            <port-except>...</port-except>
                            <packet-length>...</packet-length>
                            <packet-length-except>...</packet-length-except>
                            <traffic-class>...</traffic-class>
                            <traffic-class-except>...</traffic-class-except>
                            <icmp-type>...</icmp-type>
                            <icmp-type-except>...</icmp-type-except>
                            <icmp-code>...</icmp-code>
                            <icmp-code-except>...</icmp-code-except>
                            <tcp-initial/>
                            <tcp-established/>
                            <tcp-flags>tcp-flags</tcp-flags>
                            <interface>...</interface>
                            <interface-set>...</interface-set>
                            <forwarding-class>...</forwarding-class>
                            <forwarding-class-except>...</forwarding-class-except>
                            <loss-priority>...</loss-priority>
                            <loss-priority-except>...</loss-priority-except>
                        </from>
                    </term>
                </filter>
            </inet6>
        </family>
    </firewall>
</configuration>

Description

Define match criteria.

Contents

<address>—Match source or destination address.

<destination-address>—Match destination address.

<destination-class>—Match destination class.

<destination-class-except>—Do not match destination class.

<destination-port>—Match TCP/UDP destination port.

<destination-port-except>—Do not match TCP/UDP destination port.

<destination-prefix-list>—Match destination prefixes in named list.

<forwarding-class>—Match forwarding class.

<forwarding-class-except>—Do not match forwarding class.

<icmp-code>—Match ICMP message code.

<icmp-code-except>—Do not match ICMP message code.

<icmp-type>—Match ICMP message type.

<icmp-type-except>—Do not match ICMP message type.

<interface>—Match interface name.

<interface-group>—Match interface group.

<interface-group-except>—Do not match interface group.

<interface-set>—Match interface in set.

<loss-priority>—Match Loss Priority.

<loss-priority-except>—Do not match Loss Priority.

<next-header>—Match IP protocol type.

<next-header-except>—Do not match IP protocol type.

<packet-length>—Match packet length.

<packet-length-except>—Do not match packet length.

<port>—Match TCP/UDP source or destination port.

<port-except>—Do not match TCP/UDP source or destination port.

<prefix-list>—Match source or destination prefixes in named list.

<source-address>—Match source address.

<source-class>—Match source class.

<source-class-except>—Do not match source class.

<source-port>—Match TCP/UDP source port.

<source-port-except>—Do not match TCP/UDP source port.

<source-prefix-list>—Match source prefixes in named list.

<tcp-established>—Match packet of an established TCP connection.

<tcp-flags>—Match TCP flags (in symbolic or hex formats).

<tcp-initial>—Match initial packet of a TCP connection.

<traffic-class>—Match Differentiated Services (DiffServ) code point.

<traffic-class-except>—Do not match Differentiated Services (DiffServ) code point.