跳转至主要内容

Dell PowerEdge FN I/O Module Command Line Reference Guide 9.10(0.0)

PDF

match

Match a sequence number to the transmission control protocol (TCP)/user datagram protocol (UDP) packets.

Syntax

match seq-num {tcp | udp} { ipv6 | ip} port-num dest-ip dest-port-num

To remove the match filter for the crypto map, use the no match seq-num command.

Parameters

seq-num	Enter the match command sequence number. The range is from 0 to 255.
tcp	Enter the keyword `tcp` to configure a TCP access list filter.
udp	Enter the keyword `udp` to configure a UDP access list filter.
ipv6	Enter the source IPv6 address.
ip	Enter the source IPv4 address.
port-num	Enter the source port number. The range is from 0 to 65535
dest-ip	Enter the destination IP address.
dest-port-num	Enter the destination port number. The range is from 0 to 65535.

Defaults

none

Command Modes

CONFIG-CRYPTO-POLICY

Supported Modes

Full–Switch

Command History

Version	Description
9.9(0.0)	Introduced on the FN IOM.
9.2(0.0)	Introduced on the MXL 10/40GbE Switch IO Module.

Usage Information

UDP is not supported. Only TCP 23 telnet and 21 FTP are supported.

Example

Dell(conf-crypto-policy)#match 0 tcp a::1 /128 0 a::2 /128 23
                                             Dell(conf-crypto-policy)#match 1 tcp a::1 /128 23 a::2 /128 0
                                             Dell(conf-crypto-policy)#match 2 tcp a::1 /128 0 a::2 /128 21
                                             Dell(conf-crypto-policy)#match 3 tcp a::1 /128 21 a::2 /128 0
                                             Dell(conf-crypto-policy)#match 4 tcp 1.1.1.1 /32 0 1.1.1.2 /32 23
                                             Dell(conf-crypto-policy)#match 5 tcp 1.1.1.1 /32 23 1.1.1.2 /32 0
                                             Dell(conf-crypto-policy)#match 6 tcp 1.1.1.1 /32 0 1.1.1.2 /32 21
                                             Dell(conf-crypto-policy)#match 7 tcp 1.1.1.1 /32 21 1.1.1.2 /32 0