Cisco Cisco Packet Data Interworking Function (PDIF) Fascicule
IPv6 ACL Configuration Mode Commands
redirect css service (for downlink, by TCP/UDP packets) ▀
Cisco ASR 5x00 Command Line Interface Reference ▄
6407
dest_wildcard
This option is used in conjunction with the
dest_address
option to specify a group of addresses for which
packets are to be filtered.
The mask must be entered as a complement:
The mask must be entered as a complement:
Zero-bits in this parameter mean that the corresponding bits configured for the
dest_address
parameter must be identical.
One-bits in this parameter mean that the corresponding bits configured for the
dest_address
parameter must be ignored.
Important:
The mask must contain a contiguous set of one-bits from the least significant bit (LSB).
eq dest_port
Specifies a single, specific destination TCP port number to be filtered.
dest_port
must be configured to an integer value from 0 to 65535.
gt dest_port
Specifies that all destination TCP port numbers greater than the one specified are to be filtered.
dest_port
must be configured to an integer value from 0 to 65535.
lt dest_port
Specifies that all destination TCP port numbers less than the one specified are to be filtered.
dest_port
must be configured to an integer value from 0 to 65535.
neq dest_port
Specifies that all destination TCP port numbers not equal to the one specified are to be filtered.
dest_port
must be configured to an integer value from 0 to 65535.
range start_dest_port end_dest_port
Specifies that all destination TCP ports within a specific range are to be filtered.
start_dest_port
is the initial port in the range and
end_dest_port
is the final port in the range.
Both
start_dest_port
and
end_dest_port
can be configured to an integer value from 0 to 65535.
Usage
Block IP packets when the source and destination are of interest but for only a limited set of ports.
Important:
A maximum of 16 rule definitions can be configured per ACL. Also note that “redirect” rule
definitions are ignored for ACLs applied to specific subscribers or all subscribers facilitated by a specific context.
Example
The following command defines a rule definition that redirects packets to the charging service named
css-
svc1
, and UDP packets coming from any host are matched:
redirect css service css-svc1 downlink udp any
The following sets the insertion point to before the rule definition above: