selector

traffic selector <txt>

SDE M10-Smart M2 RS420 AresC640

IP traffic selector

Values:

txt – Traffic selector name

Instances:

Multiple

traffic selector <txt> description <txt>

SDE M10-Smart M2 RS420 AresC640

Values:

txt – Traffic selector description

traffic selector <txt> rule <u32>

SDE M10-Smart M2 RS420 AresC640

Rule number (1-9999)

Values:

u32 – Rule number (1-9999)

Instances:

Multiple

traffic selector <txt> rule <u32> app-id

SDE M10-Smart M2 RS420 AresC640

Match by connection tracking app-id

Instances:: Unique

traffic selector <txt> rule <u32> app-id custom <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID 6 (custom)

Values:

int – Selector ID to match (0-16777215)

traffic selector <txt> rule <u32> app-id engine <int>

SDE M10-Smart M2 RS420 AresC640

Classification Engine ID

Values:

int – Engine ID to match (1-255)

Instances:

Multiple

Required:

traffic selector <txt> rule <u32> app-id engine <int> selector <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID

Values:

int – Selector ID to match (0-16777215)

traffic selector <txt> rule <u32> app-id l3 <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID L3

Values:

int – Selector ID to match (1-16777215)

traffic selector <txt> rule <u32> app-id l4 <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID L4

Values:

int – Selector ID to match (1-16777215)

traffic selector <txt> rule <u32> arp-operation <txt|u32>

SDE M10-Smart M2 RS420 AresC640

Match by ARP operation

ARP filters only match on link hook

Values:

txt – Arp-op name
u32 – Arp-op number (0-65535)

Instances:

List of values

traffic selector <txt> rule <u32> connmark <int>

SDE M10-Smart M2 RS420 AresC640

Match by connection tracking mark

Values:

int – Connection tracking mark to match (0-2147483647)

traffic selector <txt> rule <u32> description <txt>

SDE M10-Smart M2 RS420 AresC640

Values:

txt – Rule description

traffic selector <txt> rule <u32> destination: SDE M10-Smart M2 RS420 AresC640
Match by destination parameters

traffic selector <txt> rule <u32> destination address <ipv4|ipv4net|ipv4range>

SDE M10-Smart M2 RS420 AresC640

Destination IP address, subnet, or range

Values:

ipv4 – IP address to match
ipv4net – Subnet to match
ipv4range – IP range to match

traffic selector <txt> rule <u32> destination address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination IP address-group

Reference:: traffic group address <txt>

traffic selector <txt> rule <u32> destination ipv6-address <ipv6|ipv6net>

SDE M10-Smart M2 RS420 AresC640

Destination IPv6 address or subnet

Values:

ipv6 – IPv6 address to match
ipv6net – Subnet to match

traffic selector <txt> rule <u32> destination ipv6-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination IP address-group

Reference:: traffic group ipv6-address <txt>

traffic selector <txt> rule <u32> destination mac-address <anymacaddr|id>

SDE M10-Smart M2 RS420 AresC640

Destination MAC address or MAC address range

Values:

anymacaddr – MAC address to match
id – MAC address range to match (e.g., 00:00:5e:00:53:00-00:00:5e:00:53:ff)

traffic selector <txt> rule <u32> destination mac-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination MAC address group

Reference:: traffic group mac-address <txt>

traffic selector <txt> rule <u32> destination port <u32|id>

SDE M10-Smart M2 RS420 AresC640

Destination port, port-range or list of ports

Values:

u32 – Numbered port to match (1-65535)
range – Numbered port-range to match (e.g., 200-300)
id – List of ports and port-ranges to match (e.g., 200-300,400)

traffic selector <txt> rule <u32> destination port-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination port-group

Reference:: traffic group port <txt>

traffic selector <txt> rule <u32> dscp <int>

SDE M10-Smart M2 RS420 AresC640

Match by DSCP value (IPv4)

Values:

int – DSCP value (0-63)

traffic selector <txt> rule <u32> ecn <int>

SDE M10-Smart M2 RS420 AresC640

Match by ECN value (IPv4)

Values:

int – ECN value (0-3)

traffic selector <txt> rule <u32> ether-type <txt|u32>

SDE M10-Smart M2 RS420 AresC640

Match by ethernet protocol encapsulated in the payload of the frame

ARP filters only match on link hook

Values:

txt – Ether-type name
u32 – Ether-type number (0-65535)

Instances:

List of values

traffic selector <txt> rule <u32> exclude: SDE M10-Smart M2 RS420 AresC640
Exclude the rule match

traffic selector <txt> rule <u32> extra-connmark <int>

SDE M10-Smart M2 RS420 AresC640

Match by connection tracking extra mark

Values:

int – Extra mark index (1-2)

Instances:

Multiple

traffic selector <txt> rule <u32> extra-connmark <int> value <int>

SDE M10-Smart M2 RS420 AresC640

Connection tracking extra mark

Values:

int – Connection tracking extra mark to match (0-2147483647)

traffic selector <txt> rule <u32> extra-mark <int>

SDE M10-Smart M2 RS420 AresC640

Match by packet extra mark

Values:

int – Extra mark index (1-2)

Instances:

Multiple

Required:

traffic selector <txt> rule <u32> extra-mark <int> value <int>

SDE M10-Smart M2 RS420 AresC640

Packet extra mark value

Values:

int – Packet extra mark to match (0-2147483647)

traffic selector <txt> rule <u32> fragmentation: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 fragmentation parameters

traffic selector <txt> rule <u32> fragmentation df-flag: SDE M10-Smart M2 RS420 AresC640
Check if Don’t-Fragment flag is set

traffic selector <txt> rule <u32> fragmentation id: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 identifier

traffic selector <txt> rule <u32> fragmentation id equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal ID

Values:

int – Equal ID (0-65535)

traffic selector <txt> rule <u32> fragmentation id greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater ID

Values:

int – Greater ID (0-65534)

traffic selector <txt> rule <u32> fragmentation id less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser ID

Values:

int – Lesser ID (1-65535)

traffic selector <txt> rule <u32> fragmentation mf-flag: SDE M10-Smart M2 RS420 AresC640
Check if More-Fragments flag is set

traffic selector <txt> rule <u32> fragmentation offset: SDE M10-Smart M2 RS420 AresC640
Match by Fragmentation offset

traffic selector <txt> rule <u32> fragmentation offset equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal offset

Values:

int – Equal offset (0-8191)

traffic selector <txt> rule <u32> fragmentation offset greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater offset

Values:

int – Greater offset (0-8190)

traffic selector <txt> rule <u32> fragmentation offset less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser offset

Values:

int – Lesser offset (1-8191)

traffic selector <txt> rule <u32> header-length: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 packet header length

traffic selector <txt> rule <u32> header-length min <u32>

SDE M10-Smart M2 RS420 AresC640

Minimun packet-header length

Values:

u32 – Packet-header length in bytes (1-15)

Instances:

Multiple

traffic selector <txt> rule <u32> header-length min <u32> max <u32>

SDE M10-Smart M2 RS420 AresC640

Maximum packet-header length

Values:

u32 – Packet-header length in bytes (1-15)

traffic selector <txt> rule <u32> hoplimit: SDE M10-Smart M2 RS420 AresC640
Match by Hoplimit (IPv6)

traffic selector <txt> rule <u32> hoplimit equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal hoplimit

Values:

int – Equal hoplimit (0-255)

traffic selector <txt> rule <u32> hoplimit greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater hoplimit

Values:

int – Greater hoplimit (0-254)

traffic selector <txt> rule <u32> hoplimit less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser hoplimit

Values:

int – Lesser hoplimit (1-255)

traffic selector <txt> rule <u32> icmp-code <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by code of ICMP message

Values:

u32 – ICMP header’s code number field (0-255)
txt – ICMP header’s code name field

Instances:

List of values

traffic selector <txt> rule <u32> icmp-type <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by type of ICMP message

Values:

u32 – ICMP header’s type number field (0-255)
txt – ICMP header’s type name field

Instances:

List of values

traffic selector <txt> rule <u32> in-interface <ifc>

SDE M10-Smart M2 RS420 AresC640

Values:

ifc – Match by inbound interface or group of interfaces match

Instances:

List of values

traffic selector <txt> rule <u32> ip-option: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 option

traffic selector <txt> rule <u32> ip-option lsrr: SDE M10-Smart M2 RS420 AresC640
Check if Loose Source Route is set

traffic selector <txt> rule <u32> ip-option ra: SDE M10-Smart M2 RS420 AresC640
Check if Router Alert is set

traffic selector <txt> rule <u32> ip-option rr: SDE M10-Smart M2 RS420 AresC640
Check if Record Route is set

traffic selector <txt> rule <u32> ip-option ssrr: SDE M10-Smart M2 RS420 AresC640
Check if Strict Source Route is set

traffic selector <txt> rule <u32> ipv6-dscp <int>

SDE M10-Smart M2 RS420 AresC640

Match by DSCP value (IPv6)

Values:

int – DSCP value (0-63)

traffic selector <txt> rule <u32> ipv6-ecn <int>

SDE M10-Smart M2 RS420 AresC640

Match by ECN value (IPv6)

Values:

int – ECN value (0-3)

traffic selector <txt> rule <u32> ipv6-extension: SDE M10-Smart M2 RS420 AresC640
Match by IPv6 extensions

traffic selector <txt> rule <u32> ipv6-extension dst: SDE M10-Smart M2 RS420 AresC640
Check if Destination options is set

traffic selector <txt> rule <u32> ipv6-extension frag: SDE M10-Smart M2 RS420 AresC640
Check if Fragmentation header is set

traffic selector <txt> rule <u32> ipv6-extension hbh: SDE M10-Smart M2 RS420 AresC640
Check if Hop-by-Hop extension is set

traffic selector <txt> rule <u32> ipv6-extension mh: SDE M10-Smart M2 RS420 AresC640
Check if Mobility Header is set

traffic selector <txt> rule <u32> ipv6-extension rt: SDE M10-Smart M2 RS420 AresC640
Check if Routing Header is set

traffic selector <txt> rule <u32> ipv6-extension srh: SDE M10-Smart M2 RS420 AresC640
Check if Segment Routing Header is set

traffic selector <txt> rule <u32> ipv6-fragmentation: SDE M10-Smart M2 RS420 AresC640
Match by IPv6 fragmentation parameters

traffic selector <txt> rule <u32> ipv6-fragmentation id: SDE M10-Smart M2 RS420 AresC640
Match by IPv6 identifier

traffic selector <txt> rule <u32> ipv6-fragmentation id equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal ID

Values:

int – Equal ID (0-65535)

traffic selector <txt> rule <u32> ipv6-fragmentation id greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater ID

Values:

int – Greater ID (0-65534)

traffic selector <txt> rule <u32> ipv6-fragmentation id less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser ID

Values:

int – Lesser ID (1-65535)

traffic selector <txt> rule <u32> ipv6-fragmentation mf-flag: SDE M10-Smart M2 RS420 AresC640
Check if More-Fragments flag is set

traffic selector <txt> rule <u32> ipv6-fragmentation offset: SDE M10-Smart M2 RS420 AresC640
Match by Fragmentation offset

traffic selector <txt> rule <u32> ipv6-fragmentation offset equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal offset

Values:

int – Equal offset (0-8191)

traffic selector <txt> rule <u32> ipv6-fragmentation offset greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater offset

Values:

int – Greater offset (0-8190)

traffic selector <txt> rule <u32> ipv6-fragmentation offset less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser offset

Values:

int – Lesser offset (1-8191)

traffic selector <txt> rule <u32> ipv6-icmp-code <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by code of ICMPv6 message

Values:

u32 – ICMPv6 header’s code number field (0-255)
txt – ICMPv6 header’s code name field

Instances:

List of values

traffic selector <txt> rule <u32> ipv6-icmp-type <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by type of ICMPv6 message

Values:

u32 – ICMPv6 header’s type number field (0-255)
txt – ICMPv6 header’s type name field

Instances:

List of values

traffic selector <txt> rule <u32> ipv6-next-header <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Next header protocol

Values:

u32 – Protocol number (0-255)
txt – Protocol name

Instances:

List of values

traffic selector <txt> rule <u32> label <id>

SDE M10-Smart M2 RS420 AresC640

Match by packet label

Reference:: traffic label <id>

traffic selector <txt> rule <u32> length: SDE M10-Smart M2 RS420 AresC640
Match by packet length

traffic selector <txt> rule <u32> length min <u32>

SDE M10-Smart M2 RS420 AresC640

Minimun packet length

Values:

u32 – Packet length in bytes (1-65535)

Instances:

Multiple

traffic selector <txt> rule <u32> length min <u32> max <u32>

SDE M10-Smart M2 RS420 AresC640

Maximum packet length

Values:

u32 – Packet length in bytes (1-65535)

traffic selector <txt> rule <u32> mark <int>

SDE M10-Smart M2 RS420 AresC640

Match by packet mark

Values:

int – Packet mark to match (0-2147483647)

traffic selector <txt> rule <u32> not: SDE M10-Smart M2 RS420 AresC640
Negate match

traffic selector <txt> rule <u32> not app-id

SDE M10-Smart M2 RS420 AresC640

Match by connection tracking app-id

Instances:: Unique

traffic selector <txt> rule <u32> not app-id custom <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID 6 (custom)

Values:

int – Selector ID to match (0-16777215)

traffic selector <txt> rule <u32> not app-id engine <int>

SDE M10-Smart M2 RS420 AresC640

Classification Engine ID

Values:

int – Engine ID to match (1-255)

Instances:

Multiple

Required:

traffic selector <txt> rule <u32> not app-id engine <int> selector <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID

Values:

int – Selector ID to match (0-16777215)

traffic selector <txt> rule <u32> not app-id l3 <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID L3

Values:

int – Selector ID to match (1-16777215)

traffic selector <txt> rule <u32> not app-id l4 <int>

SDE M10-Smart M2 RS420 AresC640

Selector ID for Classification Engine ID L4

Values:

int – Selector ID to match (1-16777215)

traffic selector <txt> rule <u32> not arp-operation <txt|u32>

SDE M10-Smart M2 RS420 AresC640

Match by ARP operation

ARP filters only match on link hook

Values:

txt – Arp-op name
u32 – Arp-op number (0-65535)

Instances:

List of values

traffic selector <txt> rule <u32> not connmark <int>

SDE M10-Smart M2 RS420 AresC640

Match by connection tracking mark

Values:

int – Connection tracking mark to match (0-2147483647)

traffic selector <txt> rule <u32> not destination: SDE M10-Smart M2 RS420 AresC640
Match by destination parameters

traffic selector <txt> rule <u32> not destination address <ipv4|ipv4net|ipv4range>

SDE M10-Smart M2 RS420 AresC640

Destination IP address, subnet, or range

Values:

ipv4 – IP address to match
ipv4net – Subnet to match
ipv4range – IP range to match

traffic selector <txt> rule <u32> not destination address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination IP address-group

Reference:: traffic group address <txt>

traffic selector <txt> rule <u32> not destination ipv6-address <ipv6|ipv6net>

SDE M10-Smart M2 RS420 AresC640

Destination IPv6 address or subnet

Values:

ipv6 – IPv6 address to match
ipv6net – Subnet to match

traffic selector <txt> rule <u32> not destination ipv6-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination IP address-group

Reference:: traffic group ipv6-address <txt>

traffic selector <txt> rule <u32> not destination mac-address <anymacaddr|id>

SDE M10-Smart M2 RS420 AresC640

Destination MAC address or MAC address range

Values:

anymacaddr – MAC address to match
id – MAC address range to match (e.g., 00:00:5e:00:53:00-00:00:5e:00:53:ff)

traffic selector <txt> rule <u32> not destination mac-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination MAC address group

Reference:: traffic group mac-address <txt>

traffic selector <txt> rule <u32> not destination port <u32|id>

SDE M10-Smart M2 RS420 AresC640

Destination port, port-range or list of ports

Values:

u32 – Numbered port to match (1-65535)
range – Numbered port-range to match (e.g., 200-300)
id – List of ports and port-ranges to match (e.g., 200-300,400)

traffic selector <txt> rule <u32> not destination port-group <txt>

SDE M10-Smart M2 RS420 AresC640

Destination port-group

Reference:: traffic group port <txt>

traffic selector <txt> rule <u32> not dscp <int>

SDE M10-Smart M2 RS420 AresC640

Match by DSCP value (IPv4)

Values:

int – DSCP value (0-63)

traffic selector <txt> rule <u32> not ecn <int>

SDE M10-Smart M2 RS420 AresC640

Match by ECN value (IPv4)

Values:

int – ECN value (0-3)

traffic selector <txt> rule <u32> not ether-type <txt|u32>

SDE M10-Smart M2 RS420 AresC640

Match by ethernet protocol encapsulated in the payload of the frame

ARP filters only match on link hook

Values:

txt – Ether-type name
u32 – Ether-type number (0-65535)

Instances:

List of values

traffic selector <txt> rule <u32> not extra-connmark <int>

SDE M10-Smart M2 RS420 AresC640

Match by connection tracking extra mark

Values:

int – Extra mark index (1-2)

Instances:

Multiple

traffic selector <txt> rule <u32> not extra-connmark <int> value <int>

SDE M10-Smart M2 RS420 AresC640

Connection tracking extra mark

Values:

int – Connection tracking extra mark to match (0-2147483647)

traffic selector <txt> rule <u32> not extra-mark <int>

SDE M10-Smart M2 RS420 AresC640

Match by packet extra mark

Values:

int – Extra mark index (1-2)

Instances:

Multiple

Required:

traffic selector <txt> rule <u32> not extra-mark <int> value <int>

SDE M10-Smart M2 RS420 AresC640

Packet extra mark value

Values:

int – Packet extra mark to match (0-2147483647)

traffic selector <txt> rule <u32> not fragmentation: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 fragmentation parameters

traffic selector <txt> rule <u32> not fragmentation df-flag: SDE M10-Smart M2 RS420 AresC640
Check if Don’t-Fragment flag is set

traffic selector <txt> rule <u32> not fragmentation id: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 identifier

traffic selector <txt> rule <u32> not fragmentation id equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal ID

Values:

int – Equal ID (0-65535)

traffic selector <txt> rule <u32> not fragmentation id greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater ID

Values:

int – Greater ID (0-65534)

traffic selector <txt> rule <u32> not fragmentation id less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser ID

Values:

int – Lesser ID (1-65535)

traffic selector <txt> rule <u32> not fragmentation mf-flag: SDE M10-Smart M2 RS420 AresC640
Check if More-Fragments flag is set

traffic selector <txt> rule <u32> not fragmentation offset: SDE M10-Smart M2 RS420 AresC640
Match by Fragmentation offset

traffic selector <txt> rule <u32> not fragmentation offset equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal offset

Values:

int – Equal offset (0-8191)

traffic selector <txt> rule <u32> not fragmentation offset greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater offset

Values:

int – Greater offset (0-8190)

traffic selector <txt> rule <u32> not fragmentation offset less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser offset

Values:

int – Lesser offset (1-8191)

traffic selector <txt> rule <u32> not header-length: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 packet header length

traffic selector <txt> rule <u32> not header-length min <u32>

SDE M10-Smart M2 RS420 AresC640

Minimun packet-header length

Values:

u32 – Packet-header length in bytes (1-15)

Instances:

Multiple

traffic selector <txt> rule <u32> not header-length min <u32> max <u32>

SDE M10-Smart M2 RS420 AresC640

Maximum packet-header length

Values:

u32 – Packet-header length in bytes (1-15)

traffic selector <txt> rule <u32> not hoplimit: SDE M10-Smart M2 RS420 AresC640
Match by Hoplimit (IPv6)

traffic selector <txt> rule <u32> not hoplimit equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal hoplimit

Values:

int – Equal hoplimit (0-255)

traffic selector <txt> rule <u32> not hoplimit greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater hoplimit

Values:

int – Greater hoplimit (0-254)

traffic selector <txt> rule <u32> not hoplimit less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser hoplimit

Values:

int – Lesser hoplimit (1-255)

traffic selector <txt> rule <u32> not icmp-code <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by code of ICMP message

Values:

u32 – ICMP header’s code number field (0-255)
txt – ICMP header’s code name field

Instances:

List of values

traffic selector <txt> rule <u32> not icmp-type <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by type of ICMP message

Values:

u32 – ICMP header’s type number field (0-255)
txt – ICMP header’s type name field

Instances:

List of values

traffic selector <txt> rule <u32> not in-interface <ifc>

SDE M10-Smart M2 RS420 AresC640

Values:

ifc – Match by inbound interface or group of interfaces match

Instances:

List of values

traffic selector <txt> rule <u32> not ip-option: SDE M10-Smart M2 RS420 AresC640
Match by IPv4 option

traffic selector <txt> rule <u32> not ip-option lsrr: SDE M10-Smart M2 RS420 AresC640
Check if Loose Source Route is set

traffic selector <txt> rule <u32> not ip-option ra: SDE M10-Smart M2 RS420 AresC640
Check if Router Alert is set

traffic selector <txt> rule <u32> not ip-option rr: SDE M10-Smart M2 RS420 AresC640
Check if Record Route is set

traffic selector <txt> rule <u32> not ip-option ssrr: SDE M10-Smart M2 RS420 AresC640
Check if Strict Source Route is set

traffic selector <txt> rule <u32> not ipv6-dscp <int>

SDE M10-Smart M2 RS420 AresC640

Match by DSCP value (IPv6)

Values:

int – DSCP value (0-63)

traffic selector <txt> rule <u32> not ipv6-ecn <int>

SDE M10-Smart M2 RS420 AresC640

Match by ECN value (IPv6)

Values:

int – ECN value (0-3)

traffic selector <txt> rule <u32> not ipv6-extension: SDE M10-Smart M2 RS420 AresC640
Match by IPv6 extensions

traffic selector <txt> rule <u32> not ipv6-extension dst: SDE M10-Smart M2 RS420 AresC640
Check if Destination options is set

traffic selector <txt> rule <u32> not ipv6-extension frag: SDE M10-Smart M2 RS420 AresC640
Check if Fragmentation header is set

traffic selector <txt> rule <u32> not ipv6-extension hbh: SDE M10-Smart M2 RS420 AresC640
Check if Hop-by-Hop extension is set

traffic selector <txt> rule <u32> not ipv6-extension mh: SDE M10-Smart M2 RS420 AresC640
Check if Mobility Header is set

traffic selector <txt> rule <u32> not ipv6-extension rt: SDE M10-Smart M2 RS420 AresC640
Check if Routing Header is set

traffic selector <txt> rule <u32> not ipv6-extension srh: SDE M10-Smart M2 RS420 AresC640
Check if Segment Routing Header is set

traffic selector <txt> rule <u32> not ipv6-fragmentation: SDE M10-Smart M2 RS420 AresC640
Match by IPv6 fragmentation parameters

traffic selector <txt> rule <u32> not ipv6-fragmentation id: SDE M10-Smart M2 RS420 AresC640
Match by IPv6 identifier

traffic selector <txt> rule <u32> not ipv6-fragmentation id equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal ID

Values:

int – Equal ID (0-65535)

traffic selector <txt> rule <u32> not ipv6-fragmentation id greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater ID

Values:

int – Greater ID (0-65534)

traffic selector <txt> rule <u32> not ipv6-fragmentation id less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser ID

Values:

int – Lesser ID (1-65535)

traffic selector <txt> rule <u32> not ipv6-fragmentation mf-flag: SDE M10-Smart M2 RS420 AresC640
Check if More-Fragments flag is set

traffic selector <txt> rule <u32> not ipv6-fragmentation offset: SDE M10-Smart M2 RS420 AresC640
Match by Fragmentation offset

traffic selector <txt> rule <u32> not ipv6-fragmentation offset equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal offset

Values:

int – Equal offset (0-8191)

traffic selector <txt> rule <u32> not ipv6-fragmentation offset greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater offset

Values:

int – Greater offset (0-8190)

traffic selector <txt> rule <u32> not ipv6-fragmentation offset less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser offset

Values:

int – Lesser offset (1-8191)

traffic selector <txt> rule <u32> not ipv6-icmp-code <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by code of ICMPv6 message

Values:

u32 – ICMPv6 header’s code number field (0-255)
txt – ICMPv6 header’s code name field

Instances:

List of values

traffic selector <txt> rule <u32> not ipv6-icmp-type <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by type of ICMPv6 message

Values:

u32 – ICMPv6 header’s type number field (0-255)
txt – ICMPv6 header’s type name field

Instances:

List of values

traffic selector <txt> rule <u32> not ipv6-next-header <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Next header protocol

Values:

u32 – Protocol number (0-255)
txt – Protocol name

Instances:

List of values

traffic selector <txt> rule <u32> not label <id>

SDE M10-Smart M2 RS420 AresC640

Match by packet label

Reference:: traffic label <id>

traffic selector <txt> rule <u32> not length: SDE M10-Smart M2 RS420 AresC640
Match by packet length

traffic selector <txt> rule <u32> not length min <u32>

SDE M10-Smart M2 RS420 AresC640

Minimun packet length

Values:

u32 – Packet length in bytes (1-65535)

Instances:

Multiple

traffic selector <txt> rule <u32> not length min <u32> max <u32>

SDE M10-Smart M2 RS420 AresC640

Maximum packet length

Values:

u32 – Packet length in bytes (1-65535)

traffic selector <txt> rule <u32> not mark <int>

SDE M10-Smart M2 RS420 AresC640

Match by packet mark

Values:

int – Packet mark to match (0-2147483647)

traffic selector <txt> rule <u32> not ori-in-interface <ifc>

SDE M10-Smart M2 RS420 AresC640

Values:

ifc – Match by original inbound interface or group of interfaces match

Instances:

List of values

traffic selector <txt> rule <u32> not out-interface <ifc>

SDE M10-Smart M2 RS420 AresC640

Values:

ifc –
Match by outbound interface or group of interfaces to match

If attached to in hook, the forwarind information base is queried

Instances:

List of values

traffic selector <txt> rule <u32> not pkt-type <txt>

SDE M10-Smart M2 RS420 AresC640

Values:

txt – Match by packet type

Instances:

List of values

traffic selector <txt> rule <u32> not protocol <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by layer 4 protocol

Values:

u32 – IP protocol number (0-255)
txt – IP protocol name

Instances:

List of values

traffic selector <txt> rule <u32> not source: SDE M10-Smart M2 RS420 AresC640
Match by source parameters

traffic selector <txt> rule <u32> not source address <ipv4|ipv4net|ipv4range>

SDE M10-Smart M2 RS420 AresC640

Source IP address, subnet, or range

Values:

ipv4 – IP address to match
ipv4net – Subnet to match
ipv4range – IP range to match

traffic selector <txt> rule <u32> not source address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source IP address-group

Reference:: traffic group address <txt>

traffic selector <txt> rule <u32> not source ipv6-address <ipv6|ipv6net>

SDE M10-Smart M2 RS420 AresC640

Source IPv6 address or subnet

Values:

ipv6 – IPv6 address to match
ipv6net – Subnet to match

traffic selector <txt> rule <u32> not source ipv6-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source IP address-group

Reference:: traffic group ipv6-address <txt>

traffic selector <txt> rule <u32> not source mac-address <anymacaddr|id>

SDE M10-Smart M2 RS420 AresC640

Source MAC address or MAC address range

Values:

anymacaddr – MAC address to match
id – MAC address range to match (e.g., 00:00:5e:00:53:00-00:00:5e:00:53:ff)

traffic selector <txt> rule <u32> not source mac-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source MAC address group

Reference:: traffic group mac-address <txt>

traffic selector <txt> rule <u32> not source port <u32|id>

SDE M10-Smart M2 RS420 AresC640

Source port, port-range or list of ports

Values:

u32 – Numbered port to match (1-65535)
range – Numbered port-range to match (e.g., 200-300)
id – List of ports and port-ranges to match (e.g., 200-300,400)

traffic selector <txt> rule <u32> not source port-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source port-group

Reference:: traffic group port <txt>

traffic selector <txt> rule <u32> not state <txt>

SDE M10-Smart M2 RS420 AresC640

Values:

txt – Match by session state

Instances:

List of values

traffic selector <txt> rule <u32> not tcp-flags <txt>

SDE M10-Smart M2 RS420 AresC640

Match by TCP flags

TCP protocol must be configured in the same rule

Values:

txt – Comma-separated list of flags (syn, ack, fin, rst, urg, psh, all, none)

Instances:

Multiple

traffic selector <txt> rule <u32> not tcp-flags <txt> mask <id>

SDE M10-Smart M2 RS420 AresC640

TCP flags mask

TCP protocol must be configured in the same rule

Values:

txt – Comma-separated list of flags to examine (syn, ack, fin, rst, urg, psh, all, none)

traffic selector <txt> rule <u32> not tcp-mss: SDE M10-Smart M2 RS420 AresC640
Match by TCP Maximum Segment Size

traffic selector <txt> rule <u32> not tcp-mss equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal MSS

Values:

int – Equal MSS (0-65535)

traffic selector <txt> rule <u32> not tcp-mss greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater MSS

Values:

int – Greater MSS (0-65534)

traffic selector <txt> rule <u32> not tcp-mss less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser MSS

Values:

int – Lesser MSS (1-65535)

traffic selector <txt> rule <u32> not tcp-option: SDE M10-Smart M2 RS420 AresC640
Match by TCP option

traffic selector <txt> rule <u32> not tcp-option eol: SDE M10-Smart M2 RS420 AresC640
Check if End if Option List is set

traffic selector <txt> rule <u32> not tcp-option noop: SDE M10-Smart M2 RS420 AresC640
Check if No Operation is set

traffic selector <txt> rule <u32> not tcp-option sack: SDE M10-Smart M2 RS420 AresC640
Check if Selective ACK is set

traffic selector <txt> rule <u32> not tcp-window: SDE M10-Smart M2 RS420 AresC640
Match by TCP Window Scaling

traffic selector <txt> rule <u32> not tcp-window equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal Window Scaling

Values:

int – Equal Window Scaling (0-255)

traffic selector <txt> rule <u32> not tcp-window greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater Window Scaling

Values:

int – Greater Window Scaling (0-254)

traffic selector <txt> rule <u32> not tcp-window less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser Window Scaling

Values:

int – Lesser Window Scaling (1-255)

traffic selector <txt> rule <u32> not ttl: SDE M10-Smart M2 RS420 AresC640
Match by Time-to-live (IPv4)

traffic selector <txt> rule <u32> not ttl equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal TTL

Values:

int – Equal TTL (0-255)

traffic selector <txt> rule <u32> not ttl greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater TTL

Values:

int – Greater TTL (0-254)

traffic selector <txt> rule <u32> not ttl less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser TTL

Values:

int – Lesser TTL (1-255)

traffic selector <txt> rule <u32> not vrf-connmark <id>

SDE M10-Smart M2 RS420 AresC640

Match by VRF connmark

Reference:: system vrf <id>

traffic selector <txt> rule <u32> not vrf-mark <id>

SDE M10-Smart M2 RS420 AresC640

Match by VRF mark

Reference:: system vrf <id>

traffic selector <txt> rule <u32> ori-in-interface <ifc>

SDE M10-Smart M2 RS420 AresC640

Values:

ifc – Match by original inbound interface or group of interfaces match

Instances:

List of values

traffic selector <txt> rule <u32> out-interface <ifc>

SDE M10-Smart M2 RS420 AresC640

Values:

ifc –
Match by outbound interface or group of interfaces to match

If attached to in hook, the forwarind information base is queried

Instances:

List of values

traffic selector <txt> rule <u32> pkt-type <txt>

SDE M10-Smart M2 RS420 AresC640

Values:

txt – Match by packet type

Instances:

List of values

traffic selector <txt> rule <u32> protocol <u32|txt>

SDE M10-Smart M2 RS420 AresC640

Match by layer 4 protocol

Values:

u32 – IP protocol number (0-255)
txt – IP protocol name

Instances:

List of values

traffic selector <txt> rule <u32> source: SDE M10-Smart M2 RS420 AresC640
Match by source parameters

traffic selector <txt> rule <u32> source address <ipv4|ipv4net|ipv4range>

SDE M10-Smart M2 RS420 AresC640

Source IP address, subnet, or range

Values:

ipv4 – IP address to match
ipv4net – Subnet to match
ipv4range – IP range to match

traffic selector <txt> rule <u32> source address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source IP address-group

Reference:: traffic group address <txt>

traffic selector <txt> rule <u32> source ipv6-address <ipv6|ipv6net>

SDE M10-Smart M2 RS420 AresC640

Source IPv6 address or subnet

Values:

ipv6 – IPv6 address to match
ipv6net – Subnet to match

traffic selector <txt> rule <u32> source ipv6-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source IP address-group

Reference:: traffic group ipv6-address <txt>

traffic selector <txt> rule <u32> source mac-address <anymacaddr|id>

SDE M10-Smart M2 RS420 AresC640

Source MAC address or MAC address range

Values:

anymacaddr – MAC address to match
id – MAC address range to match (e.g., 00:00:5e:00:53:00-00:00:5e:00:53:ff)

traffic selector <txt> rule <u32> source mac-address-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source MAC address group

Reference:: traffic group mac-address <txt>

traffic selector <txt> rule <u32> source port <u32|id>

SDE M10-Smart M2 RS420 AresC640

Source port, port-range or list of ports

Values:

u32 – Numbered port to match (1-65535)
range – Numbered port-range to match (e.g., 200-300)
id – List of ports and port-ranges to match (e.g., 200-300,400)

traffic selector <txt> rule <u32> source port-group <txt>

SDE M10-Smart M2 RS420 AresC640

Source port-group

Reference:: traffic group port <txt>

traffic selector <txt> rule <u32> state <txt>

SDE M10-Smart M2 RS420 AresC640

Values:

txt – Match by session state

Instances:

List of values

traffic selector <txt> rule <u32> tcp-flags <txt>

SDE M10-Smart M2 RS420 AresC640

Match by TCP flags

TCP protocol must be configured in the same rule

Values:

txt – Comma-separated list of flags (syn, ack, fin, rst, urg, psh, all, none)

Instances:

Multiple

traffic selector <txt> rule <u32> tcp-flags <txt> mask <id>

SDE M10-Smart M2 RS420 AresC640

TCP flags mask

TCP protocol must be configured in the same rule

Values:

txt – Comma-separated list of flags to examine (syn, ack, fin, rst, urg, psh, all, none)

traffic selector <txt> rule <u32> tcp-mss: SDE M10-Smart M2 RS420 AresC640
Match by TCP Maximum Segment Size

traffic selector <txt> rule <u32> tcp-mss equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal MSS

Values:

int – Equal MSS (0-65535)

traffic selector <txt> rule <u32> tcp-mss greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater MSS

Values:

int – Greater MSS (0-65534)

traffic selector <txt> rule <u32> tcp-mss less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser MSS

Values:

int – Lesser MSS (1-65535)

traffic selector <txt> rule <u32> tcp-option: SDE M10-Smart M2 RS420 AresC640
Match by TCP option

traffic selector <txt> rule <u32> tcp-option eol: SDE M10-Smart M2 RS420 AresC640
Check if End if Option List is set

traffic selector <txt> rule <u32> tcp-option noop: SDE M10-Smart M2 RS420 AresC640
Check if No Operation is set

traffic selector <txt> rule <u32> tcp-option sack: SDE M10-Smart M2 RS420 AresC640
Check if Selective ACK is set

traffic selector <txt> rule <u32> tcp-window: SDE M10-Smart M2 RS420 AresC640
Match by TCP Window Scaling

traffic selector <txt> rule <u32> tcp-window equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal Window Scaling

Values:

int – Equal Window Scaling (0-255)

traffic selector <txt> rule <u32> tcp-window greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater Window Scaling

Values:

int – Greater Window Scaling (0-254)

traffic selector <txt> rule <u32> tcp-window less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser Window Scaling

Values:

int – Lesser Window Scaling (1-255)

traffic selector <txt> rule <u32> ttl: SDE M10-Smart M2 RS420 AresC640
Match by Time-to-live (IPv4)

traffic selector <txt> rule <u32> ttl equal <int>

SDE M10-Smart M2 RS420 AresC640

Match by equal TTL

Values:

int – Equal TTL (0-255)

traffic selector <txt> rule <u32> ttl greater-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by greater TTL

Values:

int – Greater TTL (0-254)

traffic selector <txt> rule <u32> ttl less-than <int>

SDE M10-Smart M2 RS420 AresC640

Match by lesser TTL

Values:

int – Lesser TTL (1-255)

traffic selector <txt> rule <u32> vrf-connmark <id>

SDE M10-Smart M2 RS420 AresC640

Match by VRF connmark

Reference:: system vrf <id>

traffic selector <txt> rule <u32> vrf-mark <id>

SDE M10-Smart M2 RS420 AresC640

Match by VRF mark

Reference:: system vrf <id>