Tag Elements Beginning with F > <from> (configuration/firewall/family/inet6/service-filter/term)

Usage

<configuration>
    <firewall>
        <family>
            <inet6>
                <service-filter>
                    <term>
                        <from>
                            <interface-group>...</interface-group>
                            <interface-group-except>...</interface-group-except>
                            <source-address>...</source-address>
                            <destination-address>...</destination-address>
                            <address>...</address>
                            <source-prefix-list>...</source-prefix-list>
                            <destination-prefix-list>...</destination-prefix-list>
                            <prefix-list>...</prefix-list>
                            <next-header>...</next-header>
                            <next-header-except>...</next-header-except>
                            <source-port>...</source-port>
                            <source-port-except>...</source-port-except>
                            <destination-port>...</destination-port>
                            <destination-port-except>...</destination-port-except>
                            <port>...</port>
                            <port-except>...</port-except>
                            <esp-spi>...</esp-spi>
                            <esp-spi-except>...</esp-spi-except>
                            <ah-spi>...</ah-spi>
                            <ah-spi-except>...</ah-spi-except>
                        </from>
                    </term>
                </service-filter>
            </inet6>
        </family>
    </firewall>
</configuration>

Description

Match criteria.

Contents

<address>—Match source or destination address.

<ah-spi>—Match IPSec AH SPI value.

<ah-spi-except>—Do not match IPSec AH SPI value.

<destination-address>—Match destination address.

<destination-port>—Match TCP/UDP destination port.

<destination-port-except>—Do not match TCP/UDP destination port.

<destination-prefix-list>—Match destination prefixes in named list.

<esp-spi>—Match IPSec ESP SPI value.

<esp-spi-except>—Do not match IPSec ESP SPI value.

<interface-group>—Match interface group.

<interface-group-except>—Do not match interface group.

<next-header>—Match IP protocol type.

<next-header-except>—Do not match IP protocol type.

<port>—Match TCP/UDP source or destination port.

<port-except>—Do not match TCP/UDP source or destination port.

<prefix-list>—Match source or destination prefixes in named list.

<source-address>—Match source address.

<source-port>—Match TCP/UDP source port.

<source-port-except>—Do not match TCP/UDP source port.

<source-prefix-list>—Match source prefixes in named list.