Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Configuring Protocol Conditions with Parameters (SRC CLI)

 

Use the following configuration statements to configure classify-traffic conditions that contain a parameter value for the protocol:

To configure a protocol condition that contains a parameter value for the protocol:

  1. From configuration mode, enter the parameter protocol condition configuration. For example:

  2. Assign a parameter as the protocol matched by this classify-traffic condition.

    Before you assign a parameter, you must create a parameter of type protocol and commit the parameter configuration.

  3. (Optional) Configure the policy to match packets with the protocol that is either equal or not equal to the specified protocol.

  4. (Optional) Configure the value of the TCP flags field in the IP header.

  5. (Optional) Configure the mask associated with TCP flags.

  6. (Optional) Specify the authentication header (AH) or the encapsulating security payload (ESP) security parameter index (SPI).

  7. (Optional) Configure the value of the IP flags field in the IP header.

  8. (Optional) Configure the mask that is associated with the IP flag.

  9. (Optional) Configure the value of the fragment offset field.

  10. (Optional) Configure the packet length on which to match. The length refers only to the IP packet, including the packet header, and does not include any layer 2 encapsulation overhead.

  11. (Optional) Enter the protocol attribute configuration.

  12. (Optional) Configure the ICMP packet type.

  13. (Optional) Configure the ICMP code.

  14. (Optional) Configure the IGMP packet type on which to match.

  15. (Optional) Enter the destination port configuration.

  16. (Optional) Configure the policy to match packets with a port that is either equal or not equal to the specified port.

  17. (Optional) Configure the TCP or UDP destination port.

  18. (Optional) Enter the source port configuration.

  19. (Optional) Configure the policy to match packets with a port that is either equal or not equal to the specified port.

  20. (Optional) Configure the TCP or UDP source port.

  21. (Optional) Verify the parameter protocol configuration.