Siemens S223 - Manual (Page 141)

User Manual UMN:CLI
SURPASS hiD 6615 S223/S323 R1.5
A50010-Y3-C150-2-7619 141
7.6.2.3 Packet Classification
After configuring a packet classification for a rule, then configure how to process the
packets. To specify a packet-classifying pattern, use the following command.
When specifying a source and destination IP address as a packet-classifying pattern, the
destination IP address must be after the source IP address.
Command Mode Description
port {SRC-PORT | any} {DST-
PORT | cpu | any}
Classifies a physical port:
SRC-PORT: source port number
DST-PORT: destination port number
cpu: CPU port
any: any physical port (ignore)
vlan {VID | any}
Classifies a VLAN:
VLAN: 1-4094
any: any VLAN (ignore)
dscp {<0-63> | any}
Classifies a DSCP value:
0-63: DSCP value
any: any DSCP (ignore)
cos {<0-7> | any}
Classifies the IEEE 802.1p priority:
0-7: 802.1p priority value
any: any 802.1p priority value (ignore)
tos {<0-255> | any}
Classifies all ToS field:
0-255: ToS value
any: any ToS value (ignore)
ip-prec {<0-7> | any}
Classifies an IP precedence:
0-7: IP precedence value
any: any IP precedence value (ignore)
length {<21-65535> | any}
Classifies a packet length:
21-65535: IP packet length
any: any IP packet length (ignore)
ethtype {TYPE-NUM | arp | any}
Classifies the Ethernet type:
TYPE-NUM: Ethernet type field (hex, e.g. 0800 for
IPv4)
arp: address resolution protocol
any: any Ethernet type (ignore)
mac {SRC-MAC-ADDRESS |
SRC-MAC-ADDRESS / MASK-
BITS | any} {DST-MAC-
ADDRESS IDST-MAC-ADDRESS/
MASK BITS I any}
Classifies MAC address:
SRC-MAC-ADDRESS: source MAC address
DST-MAC-ADDRESS: destination MAC address
any: any source/destination MAC address (ignore)
ip {A.B.C.D | A.B.C.D/M | any}
{A.B.C.D | A.B.C.D/M | any} [0-
255]
Rule
Classifies an IP address:
A.B.C.D: source/destination IP address
A.B.C.D/M: source/destination IP address with mask
any: any source/destination IP address
0-255: IP protocol number
!